--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-02T19:49:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"2c3b915e-8242-492a-943b-13926af41845","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T19:49:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c3b915e-8242-492a-943b-13926af41845","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T19:49:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c3b915e-8242-492a-943b-13926af41845","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T19:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90384627bd70d117e6069f3919c5131b324c1c2a97ed79bbfa5a9ac756051303"}
{"level":"info","ts":"2026-07-02T19:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eba877015e4f7836d440b6f66b6852971801bbd06e6318366a4aa42ae7cfa7b2"}
{"level":"info","ts":"2026-07-02T19:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0db2ed44c46ea51c60eacd894f308ade0d5da06fbdfc01951d95f5c877d9ed09"}
{"level":"info","ts":"2026-07-02T19:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d953aa1656a7daeacf8fed385b23f3badb39e54569258677700430844b421bd"}
{"level":"info","ts":"2026-07-02T19:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/975a41c3c029ce4f4e3d2a60b1c24eb295708286ad02dc61325a65d784b5b20c"}
{"level":"info","ts":"2026-07-02T19:49:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c8ad72ee5a18f01c2f0f0eef3122c0681731707713832cea3f66e79db48bd13"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a2406d7ee209339e2d7a72452af2e3d4ba93b1d1e8336c80286440b3befdc3a"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b476a8c0ae915ff1186e6a0cd9dff48d810dde888474720c838346db2a34be89"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f42ffd4f3e4cca2c22eb102b2ff252937e284e4599f94f54d59a1a04fc9d1140"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69d6514c56123fa0510df57fa0dc736f399e483865f4a5901fdfcbd8886465f5"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cad3b67e0fb6d5e184be14d7151dd3909ab73e163e63080e53b541522a614b6"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b3c05e274e6a0cd52b85067095bdadb7361bb8c16591d0508766b77ac25479c"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76609f7a614a6084d703a7ab898192c4332223a5b3046bfac1c1218305c96d9d"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49b337319199622d5a34eb58cb67c50f88602ed7d245754bc0bbcbea952f9445"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c55b6d8edfeb46e167cdc4676e63831a8446b9c9515b5b1ad561e2edb776c62a"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27f5126169c624cc6796bb0bd21c397a4475c401de06541ccaef50cbb5faa17e"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/350dfb961c7f342a9b60e9574ba9d56d6dc47417ab1da4c8bff6202f94a46b7c"}
{"level":"info","ts":"2026-07-02T19:49:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/019c2840d8f3b506e259b9c73dcd7614b11217b9ef11ac5e2b64e2cf6c93ae03"}
{"level":"info","ts":"2026-07-02T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6da064280b8bebf5fc033bb894f2564f9852f958d5b0298e6e3c3fdeb7d75b54"}
{"level":"info","ts":"2026-07-02T19:49:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7f8823083abe4e94544fadc46874889762d959e0f5732e0a818910a0f420671"}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353"}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353"}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353"}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353"}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa"}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa"}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:50:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa"}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:50:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:50:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b"}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b"}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:50:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:50:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b"}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:50:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:50:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569"}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569"}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:50:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:50:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:50:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569"}
{"level":"info","ts":"2026-07-02T19:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1588785ee6277fb25e3d4ffa25c7cd7e95f38da12dcbfec278542edcd270353"}
{"level":"info","ts":"2026-07-02T19:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df49aa48e47126770ef939e2654e37d80253f95147b62e1b6f84394c8b6627fa"}
{"level":"info","ts":"2026-07-02T19:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bc6008eeb98fdde180efa4f2ec3e0fca751eb2579b6731a84f0b579a30c8569"}
{"level":"info","ts":"2026-07-02T19:50:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/278ba7a2eb97df81192d38cb5bec223400d5d80b29c722d80d727c1f6608e65b"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"}
{"level":"error","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08"}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08"}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08"}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a"}
{"level":"error","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"214cc47595c1787399d3e979814cdfb8df51f646e044a1d428b804ef818a4af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"214cc47595c1787399d3e979814cdfb8df51f646e044a1d428b804ef818a4af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/214cc47595c1787399d3e979814cdfb8df51f646e044a1d428b804ef818a4af2"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"214cc47595c1787399d3e979814cdfb8df51f646e044a1d428b804ef818a4af2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["214cc47595c1787399d3e979814cdfb8df51f646e044a1d428b804ef818a4af2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"214cc47595c1787399d3e979814cdfb8df51f646e044a1d428b804ef818a4af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"214cc47595c1787399d3e979814cdfb8df51f646e044a1d428b804ef818a4af2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/214cc47595c1787399d3e979814cdfb8df51f646e044a1d428b804ef818a4af2"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a"}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538"}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:51:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada"}
{"level":"info","ts":"2026-07-02T19:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538"}
{"level":"info","ts":"2026-07-02T19:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55642","PortSpecifier":{"PortValue":55642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55642","PortSpecifier":{"PortValue":55642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021903,"nanos":988206110},"http":{"id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:51:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b73ef0e1-b81c-40e0-8891-ab52d00390f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38954","PortSpecifier":{"PortValue":38954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38954","PortSpecifier":{"PortValue":38954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021904,"nanos":47543863},"http":{"id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/auth-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9aa21812-df50-4bc8-83d8-c619ad129c8b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55654","PortSpecifier":{"PortValue":55654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","method":"GET","path":"/maas-api/v1/api-keys/69f995ba-56c7-45ac-9a00-dd96b3967138","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55654","PortSpecifier":{"PortValue":55654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021904,"nanos":129623721},"http":{"id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","method":"GET","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/69f995ba-56c7-45ac-9a00-dd96b3967138",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/69f995ba-56c7-45ac-9a00-dd96b3967138",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"58682b2e-10a6-44f2-a9db-ba2effbffdbf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38960","PortSpecifier":{"PortValue":38960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"956e58da-4185-4434-a0b2-05b88d6f47f4","method":"GET","path":"/maas-api/v1/api-keys/678f26bd-4ce5-411c-b9c9-3e3b565f4d06","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38960","PortSpecifier":{"PortValue":38960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021904,"nanos":166308048},"http":{"id":"956e58da-4185-4434-a0b2-05b88d6f47f4","method":"GET","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/678f26bd-4ce5-411c-b9c9-3e3b565f4d06",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/678f26bd-4ce5-411c-b9c9-3e3b565f4d06",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/auth-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:51:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"956e58da-4185-4434-a0b2-05b88d6f47f4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57462","PortSpecifier":{"PortValue":57462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57462","PortSpecifier":{"PortValue":57462}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021921,"nanos":188896804},"http":{"id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b1d877b-c2e6-41c6-bb54-5a2664f0d2fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45078","PortSpecifier":{"PortValue":45078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"76749b35-9385-478c-b4bb-6a92b9d484fd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45078","PortSpecifier":{"PortValue":45078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021921,"nanos":236506365},"http":{"id":"76749b35-9385-478c-b4bb-6a92b9d484fd","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/auth-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"76749b35-9385-478c-b4bb-6a92b9d484fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57472","PortSpecifier":{"PortValue":57472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"096f3db3-ed76-40a7-9674-8743d1e0b131","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57472","PortSpecifier":{"PortValue":57472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021921,"nanos":278223209},"http":{"id":"096f3db3-ed76-40a7-9674-8743d1e0b131","method":"GET","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16PuzoqBuyakh4vpb_hZQKEVNKJuKNZvCegL6t1gMcCC5kG6elYadHLfcnyJG"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16PuzoqBuyakh4vpb_hZQKEVNKJuKNZvCegL6t1gMcCC5kG6elYadHLfcnyJG\"}"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83ff0e65-2fd7-4216-8b9e-ce40df07416e","keyName":"e2e-auth-iso-a-aa4b73","subscription":"e2e-auth-iso-e0c33c","tenant":"e2e-shared-a-2fca4d","userId":"83ff0e65-2fd7-4216-8b9e-ce40df07416e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e0c33c"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"096f3db3-ed76-40a7-9674-8743d1e0b131","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35942","PortSpecifier":{"PortValue":35942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35942","PortSpecifier":{"PortValue":35942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021943,"nanos":492883564},"http":{"id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d627a50c-93d3-49f5-aa65-f2ebe1431950","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50186","PortSpecifier":{"PortValue":50186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021943,"nanos":538416955},"http":{"id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/auth-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b3c8373-d1ec-4e28-b100-3be1762789d1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50198","PortSpecifier":{"PortValue":50198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41c1f983-6e0a-4592-bf46-5aa807687524","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50198","PortSpecifier":{"PortValue":50198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021943,"nanos":590917565},"http":{"id":"41c1f983-6e0a-4592-bf46-5aa807687524","method":"GET","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11tJtDIx3vIEyxHI3_ehY7zrPLeKbrNY6LY9zES3hzKbPAhXe6Z45x3QxJvWz"}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11tJtDIx3vIEyxHI3_ehY7zrPLeKbrNY6LY9zES3hzKbPAhXe6Z45x3QxJvWz\"}"}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-02T19:52:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41c1f983-6e0a-4592-bf46-5aa807687524","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40722","PortSpecifier":{"PortValue":40722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40722","PortSpecifier":{"PortValue":40722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021960,"nanos":677743772},"http":{"id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67bd9d52-976c-4f7b-bb8e-ac6410cf7cda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43076","PortSpecifier":{"PortValue":43076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f66d87a3-427c-430c-833d-701e0de8fef3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43076","PortSpecifier":{"PortValue":43076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021960,"nanos":710611469},"http":{"id":"f66d87a3-427c-430c-833d-701e0de8fef3","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/auth-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f66d87a3-427c-430c-833d-701e0de8fef3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40734","PortSpecifier":{"PortValue":40734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40734","PortSpecifier":{"PortValue":40734}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021960,"nanos":748073919},"http":{"id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9908eb1c-bb00-4f01-88ee-34b5d0bc72c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43084","PortSpecifier":{"PortValue":43084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d06a31c-c0d1-4368-99ad-d52adac04239","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43084","PortSpecifier":{"PortValue":43084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021960,"nanos":786334631},"http":{"id":"3d06a31c-c0d1-4368-99ad-d52adac04239","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/auth-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d06a31c-c0d1-4368-99ad-d52adac04239","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51510","PortSpecifier":{"PortValue":51510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"715ca8ab-1420-4221-8c90-1be343c4b719","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51510","PortSpecifier":{"PortValue":51510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021977,"nanos":831329094},"http":{"id":"715ca8ab-1420-4221-8c90-1be343c4b719","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"715ca8ab-1420-4221-8c90-1be343c4b719","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55130","PortSpecifier":{"PortValue":55130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55130","PortSpecifier":{"PortValue":55130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021977,"nanos":866493148},"http":{"id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/auth-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35a4186e-9615-444b-b70c-0c6d2fd2d262","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55134","PortSpecifier":{"PortValue":55134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","method":"GET","path":"/maas-api/v1/api-keys/6f32b56f-c368-4c51-9dc8-8177c73b2f13","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55134","PortSpecifier":{"PortValue":55134}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021977,"nanos":904730243},"http":{"id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","method":"GET","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6f32b56f-c368-4c51-9dc8-8177c73b2f13",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6f32b56f-c368-4c51-9dc8-8177c73b2f13",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/auth-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68ac06e5-b68f-44a8-b2cd-2c52eeafe0df","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51512","PortSpecifier":{"PortValue":51512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"22e8aa56-7095-429b-8111-74d24530a2e3","method":"GET","path":"/maas-api/v1/api-keys/6f32b56f-c368-4c51-9dc8-8177c73b2f13","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51512","PortSpecifier":{"PortValue":51512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021977,"nanos":936540284},"http":{"id":"22e8aa56-7095-429b-8111-74d24530a2e3","method":"GET","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6f32b56f-c368-4c51-9dc8-8177c73b2f13",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/6f32b56f-c368-4c51-9dc8-8177c73b2f13",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:52:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"22e8aa56-7095-429b-8111-74d24530a2e3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46102","PortSpecifier":{"PortValue":46102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46102","PortSpecifier":{"PortValue":46102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021994,"nanos":987903621},"http":{"id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:53:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae8a4af0-1ed3-4d3b-a9f0-90298c33bb7b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33450","PortSpecifier":{"PortValue":33450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33450","PortSpecifier":{"PortValue":33450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021995,"nanos":24081145},"http":{"id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/auth-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"682f1ed0-6197-45bf-b5bc-2d1e7008f3fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46104","PortSpecifier":{"PortValue":46104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46104","PortSpecifier":{"PortValue":46104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783021995,"nanos":68953748},"http":{"id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18DztytH97S3V8Bli_yWJMNlcKpEjKYABfgsQXIeUO68jZZOsaO3OTu8mzhfj"}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18DztytH97S3V8Bli_yWJMNlcKpEjKYABfgsQXIeUO68jZZOsaO3OTu8mzhfj\"}"}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b34deeba-366b-45d9-8f18-18ecb9f35636","keyName":"e2e-auth-iso-a-189aad","subscription":"e2e-auth-iso-8c26b7","tenant":"e2e-shared-a-2fca4d","userId":"b34deeba-366b-45d9-8f18-18ecb9f35636","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/auth-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8c26b7"}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:53:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ef2756f-3e80-4b61-9c8d-c8146b0db9b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4cc6aff827c6f53838ec3bd740a6bb8b35149a581028a34fc83da9b1a194695"}
{"level":"info","ts":"2026-07-02T19:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73c8b06a3ed1aa1cb8446f6b548227ea40b373c2b5483fdcc4da4ad87183e55e"}
{"level":"info","ts":"2026-07-02T19:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0033802ff8a6b0b279275bd695fb90c1ab4e698551d559dbe10845d9a000a08"}
{"level":"info","ts":"2026-07-02T19:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/811cdea0bc521a43f5b63d884e1143e65fd1c78c7f25b0b4fac41ba94d6f24a8"}
{"level":"info","ts":"2026-07-02T19:53:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aadc96424737c08516efed736dad5bd9887df0f8d65216dd11a2c3cf4861f4f8"}
{"level":"info","ts":"2026-07-02T19:53:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa80f736b459633f908a4b0eed2326c32ed36898332f094b30e28e5ba66375e1"}
{"level":"info","ts":"2026-07-02T19:53:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4758f32c0a8acc18a8f071656e2fd89b6d7ea397cd00d446fbffe8d406423c48"}
{"level":"info","ts":"2026-07-02T19:53:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7d821b303a4661f4347cf46ff26468cbc3a05857949faaf9904615d2543f00a"}
{"level":"info","ts":"2026-07-02T19:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08f574d895442a41cbef0b286d6ab8bd2b6461bb5ddca95b6e68e0422341007a"}
{"level":"info","ts":"2026-07-02T19:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00ea30a7909f2d2b4bfa644d2969b1aa86c19eb3615958b32801858bde2859c6"}
{"level":"info","ts":"2026-07-02T19:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/081013685352826d61c783b776277cb17094e308522741e4fde565ad7025bada"}
{"level":"info","ts":"2026-07-02T19:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/214cc47595c1787399d3e979814cdfb8df51f646e044a1d428b804ef818a4af2"}
{"level":"info","ts":"2026-07-02T19:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46c9b09fe02d34029b4f025ca66973323e0941f225aaec6c23f13fde6e24586a"}
{"level":"info","ts":"2026-07-02T19:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55901eb3986ccf892fa293c7edf74a5c573b1c4d38df3417f60a6a3922df57e4"}
{"level":"info","ts":"2026-07-02T19:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbdeb815b36b854f743ca8d603ce29191bde03097ee1849f206c56357d613811"}
{"level":"info","ts":"2026-07-02T19:53:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/430a9199e7c6ee85b1a4d8fef5c13470a399a64b0355ec542427790b47bae538"}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee"}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"error","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133"}
{"level":"error","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"debug","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:53:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"error","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:53:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca"}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d"}
{"level":"info","ts":"2026-07-02T19:54:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca"}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd"}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1"}
{"level":"debug","ts":"2026-07-02T19:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07"}
{"level":"info","ts":"2026-07-02T19:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca"}
{"level":"info","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7946526-4246-4dae-a87a-170418be79e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37736","PortSpecifier":{"PortValue":37736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7946526-4246-4dae-a87a-170418be79e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7946526-4246-4dae-a87a-170418be79e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37736","PortSpecifier":{"PortValue":37736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022068,"nanos":167926331},"http":{"id":"b7946526-4246-4dae-a87a-170418be79e0","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7946526-4246-4dae-a87a-170418be79e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7946526-4246-4dae-a87a-170418be79e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7946526-4246-4dae-a87a-170418be79e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7946526-4246-4dae-a87a-170418be79e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7946526-4246-4dae-a87a-170418be79e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7946526-4246-4dae-a87a-170418be79e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/sub-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7946526-4246-4dae-a87a-170418be79e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7946526-4246-4dae-a87a-170418be79e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7946526-4246-4dae-a87a-170418be79e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7946526-4246-4dae-a87a-170418be79e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7946526-4246-4dae-a87a-170418be79e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44744","PortSpecifier":{"PortValue":44744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44744","PortSpecifier":{"PortValue":44744}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022068,"nanos":218358579},"http":{"id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/sub-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6aba0c57-5b77-4390-82ab-971c9a82c95d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37748","PortSpecifier":{"PortValue":37748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37748","PortSpecifier":{"PortValue":37748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022068,"nanos":268428739},"http":{"id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","method":"GET","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MFO2CUAUwNr1eJRD_VpyT0ZZB9gY3TzkOBbavoQKdnzFzI4iuNvA7ywDgSIk"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MFO2CUAUwNr1eJRD_VpyT0ZZB9gY3TzkOBbavoQKdnzFzI4iuNvA7ywDgSIk\"}"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0e40d860-8c1e-4a36-bea8-66047ee9d2db","keyName":"e2e-sub-iso-6f5cfb","subscription":"e2e-a-only-0a712f","tenant":"e2e-shared-a-2fca4d","userId":"0e40d860-8c1e-4a36-bea8-66047ee9d2db","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/sub-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-0a712f"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d08f4f3-4a43-4bab-84e7-89e26145ef1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adae0970-0160-4a97-844c-bfd840cefce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44758","PortSpecifier":{"PortValue":44758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adae0970-0160-4a97-844c-bfd840cefce1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adae0970-0160-4a97-844c-bfd840cefce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44758","PortSpecifier":{"PortValue":44758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022068,"nanos":305995332},"http":{"id":"adae0970-0160-4a97-844c-bfd840cefce1","method":"GET","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Qsu0DiWpjlbl6WgF_tMr4rSTLnApbnTssMjMXemd8zBSaWD1hPU1F0PL3upF"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Qsu0DiWpjlbl6WgF_tMr4rSTLnApbnTssMjMXemd8zBSaWD1hPU1F0PL3upF\"}"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4825f90a-4197-454d-8ee9-844baa7d2962","keyName":"e2e-sub-iso-e7ef77","subscription":"e2e-b-only-0a712f","tenant":"e2e-shared-b-f9d728","userId":"4825f90a-4197-454d-8ee9-844baa7d2962","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adae0970-0160-4a97-844c-bfd840cefce1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/sub-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-0a712f"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adae0970-0160-4a97-844c-bfd840cefce1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adae0970-0160-4a97-844c-bfd840cefce1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:54:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adae0970-0160-4a97-844c-bfd840cefce1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55920","PortSpecifier":{"PortValue":55920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d48a95d-b184-4a2d-ade7-47297b794615","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55920","PortSpecifier":{"PortValue":55920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022080,"nanos":380060537},"http":{"id":"7d48a95d-b184-4a2d-ade7-47297b794615","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/sub-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d48a95d-b184-4a2d-ade7-47297b794615","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50014","PortSpecifier":{"PortValue":50014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3f99af8-1824-4a11-a676-1be7012feb97","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50014","PortSpecifier":{"PortValue":50014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022080,"nanos":423306587},"http":{"id":"b3f99af8-1824-4a11-a676-1be7012feb97","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/sub-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3f99af8-1824-4a11-a676-1be7012feb97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55934","PortSpecifier":{"PortValue":55934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55934","PortSpecifier":{"PortValue":55934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022080,"nanos":460893932},"http":{"id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-d0avf0C3yx5tnznO_nUC9JxOaNPChRB7yG9BOTlKpk27xbWEbBcoIJWSgQIQ"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-d0avf0C3yx5tnznO_nUC9JxOaNPChRB7yG9BOTlKpk27xbWEbBcoIJWSgQIQ\"}"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7892dcfb-f28e-460c-95b2-5b33a67dd3a6","keyName":"e2e-sub-iso-4823e4","subscription":"e2e-shared-sub-6b6f6f","tenant":"e2e-shared-a-2fca4d","userId":"7892dcfb-f28e-460c-95b2-5b33a67dd3a6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/sub-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6b6f6f"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04b80a63-a49f-4d5d-82fe-cf52e6f7fc00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"050ad248-4995-460e-96e8-193d814f6c82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50020","PortSpecifier":{"PortValue":50020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"050ad248-4995-460e-96e8-193d814f6c82","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"050ad248-4995-460e-96e8-193d814f6c82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50020","PortSpecifier":{"PortValue":50020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022080,"nanos":494904515},"http":{"id":"050ad248-4995-460e-96e8-193d814f6c82","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-m3Uet3mZld12YmYJ_SLHQaqTry7LOiUrNKjgsAP47kaZQQYInwmDO5HvPjlM"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-m3Uet3mZld12YmYJ_SLHQaqTry7LOiUrNKjgsAP47kaZQQYInwmDO5HvPjlM\"}"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"90868833-0c28-42cd-b7e2-ae5913e8a4c8","keyName":"e2e-sub-iso-d8642e","subscription":"e2e-shared-sub-6b6f6f","tenant":"e2e-shared-b-f9d728","userId":"90868833-0c28-42cd-b7e2-ae5913e8a4c8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"050ad248-4995-460e-96e8-193d814f6c82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/sub-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6b6f6f"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"050ad248-4995-460e-96e8-193d814f6c82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"050ad248-4995-460e-96e8-193d814f6c82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:54:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"050ad248-4995-460e-96e8-193d814f6c82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"}
{"level":"debug","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"}
{"level":"debug","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"}
{"level":"info","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78"}
{"level":"error","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"error","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bea5a6148f43ce4b858a689d232ac58b19caa35407f3998e0b330c81007bb32f"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a35c89d5d0528e507678710300b1781d85e40fb9b5eff9d18b30c739df3e12d"}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:54:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/698c1b4fcdba87f7c42951832802a09bd50cb9d6d2aad789be5652db8289a6bd"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90ac03c01e3c2b860e210850dd1a5cbc9eb9b9a8820a76b06c86043d7115964b"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdd4d8bba9bbd30e89a5d70009616e8a93124db5f3f59ad904573ff2b1a7e144"}
{"level":"debug","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde6e7eb5045515464c99ab71760ad1eded15aba26ea60961361e97439ad02c0"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1584af6d4f5601f8c09042e9fd2966598f57349ca600a63f3a188cea833aa98"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2540fd95c8d7734465a19c82bd6a81c454d9f52c88a03f634b2e408f39b0a133"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4972bd352716da64ef9fc86fcf4c25cd749b7037634c91d16fb1ce61c93d2bca"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5155cf0441a043a679da2e14c8fdb97f2745c37e78bab31397d70086c1a23c07"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef436d17f9e309d7a2c0d2ea99e619488389c9fd9904d898f46583fdf162df01"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/830549045b20c66a5081d78a00b191adf64b04abb140d03c2492f4fb636d1fd2"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63c46b3936139f1853a8a9b17c941f86f2c3574cb11329f7aadc996fb3faba71"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/116c80ade7a48b4898047f16f66c1a97b6b08db8571638925fe8b20c1f4d5e90"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1439bea1069f1d3594713eafbcdc46a1e647714361c243a81053b5f6e8aeb5e1"}
{"level":"debug","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:54:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:54:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"}
{"level":"info","ts":"2026-07-02T19:54:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e74f72dd66e82f3f70a2ba7ab4064b5ffbea6a65fe7b4bf463cc6112a6141ee"}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"error","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97"}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97"}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65"}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd"}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd"}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1"}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1"}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933"}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933"}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933"}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933"}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933"}
{"level":"debug","ts":"2026-07-02T19:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65"}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"}
{"level":"debug","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933"}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"}
{"level":"error","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b"}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac"}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-02T19:55:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-02T19:55:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"info","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49792","PortSpecifier":{"PortValue":49792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a82ad592-b603-4419-94f0-2973b83b37d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49792","PortSpecifier":{"PortValue":49792}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022133,"nanos":422398443},"http":{"id":"a82ad592-b603-4419-94f0-2973b83b37d7","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a82ad592-b603-4419-94f0-2973b83b37d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:53952","PortSpecifier":{"PortValue":53952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:53952","PortSpecifier":{"PortValue":53952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022133,"nanos":469223943},"http":{"id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/rate-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfa7449b-7b09-44c7-a71b-a822bccf084f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49808","PortSpecifier":{"PortValue":49808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49808","PortSpecifier":{"PortValue":49808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022133,"nanos":504813432},"http":{"id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19JmHHIEuRtrVoIvR_rWORNPNAu4KXiha8HqvJEQmj0DEWdkcPUPR8ghAFle3"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19JmHHIEuRtrVoIvR_rWORNPNAu4KXiha8HqvJEQmj0DEWdkcPUPR8ghAFle3\"}"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbff1889-8ed7-4188-8266-3d4fc41a01f6","keyName":"e2e-rate-a-50fe4f","subscription":"e2e-rate-iso-a-50fe4f","tenant":"e2e-shared-a-2fca4d","userId":"dbff1889-8ed7-4188-8266-3d4fc41a01f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-50fe4f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-50fe4f","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-50fe4f"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dbff1889-8ed7-4188-8266-3d4fc41a01f6","keyName":"e2e-rate-a-50fe4f","selected_subscription":"e2e-rate-iso-a-50fe4f","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-50fe4f@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-50fe4f","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46a32f5f-8ca1-40c4-932a-6cde38c46f4f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49814","PortSpecifier":{"PortValue":49814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1b189bd-cf0b-4320-a516-05e91234e62a","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49814","PortSpecifier":{"PortValue":49814}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022134,"nanos":556166301},"http":{"id":"b1b189bd-cf0b-4320-a516-05e91234e62a","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19JmHHIEuRtrVoIvR_rWORNPNAu4KXiha8HqvJEQmj0DEWdkcPUPR8ghAFle3"}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19JmHHIEuRtrVoIvR_rWORNPNAu4KXiha8HqvJEQmj0DEWdkcPUPR8ghAFle3\"}"}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbff1889-8ed7-4188-8266-3d4fc41a01f6","keyName":"e2e-rate-a-50fe4f","subscription":"e2e-rate-iso-a-50fe4f","tenant":"e2e-shared-a-2fca4d","userId":"dbff1889-8ed7-4188-8266-3d4fc41a01f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-50fe4f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-50fe4f","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-50fe4f"}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dbff1889-8ed7-4188-8266-3d4fc41a01f6","keyName":"e2e-rate-a-50fe4f","selected_subscription":"e2e-rate-iso-a-50fe4f","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-50fe4f@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-50fe4f","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1b189bd-cf0b-4320-a516-05e91234e62a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49828","PortSpecifier":{"PortValue":49828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49828","PortSpecifier":{"PortValue":49828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022135,"nanos":595075256},"http":{"id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19JmHHIEuRtrVoIvR_rWORNPNAu4KXiha8HqvJEQmj0DEWdkcPUPR8ghAFle3"}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19JmHHIEuRtrVoIvR_rWORNPNAu4KXiha8HqvJEQmj0DEWdkcPUPR8ghAFle3\"}"}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbff1889-8ed7-4188-8266-3d4fc41a01f6","keyName":"e2e-rate-a-50fe4f","subscription":"e2e-rate-iso-a-50fe4f","tenant":"e2e-shared-a-2fca4d","userId":"dbff1889-8ed7-4188-8266-3d4fc41a01f6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-50fe4f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-50fe4f","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-50fe4f"}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dbff1889-8ed7-4188-8266-3d4fc41a01f6","keyName":"e2e-rate-a-50fe4f","selected_subscription":"e2e-rate-iso-a-50fe4f","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-50fe4f@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-50fe4f","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e53fa408-2a24-4bcc-ba89-c7b38a5cde7e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c97735c-377c-4004-a223-66db69512a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57616","PortSpecifier":{"PortValue":57616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c97735c-377c-4004-a223-66db69512a8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c97735c-377c-4004-a223-66db69512a8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57616","PortSpecifier":{"PortValue":57616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022144,"nanos":212994990},"http":{"id":"5c97735c-377c-4004-a223-66db69512a8b","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c97735c-377c-4004-a223-66db69512a8b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c97735c-377c-4004-a223-66db69512a8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c97735c-377c-4004-a223-66db69512a8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c97735c-377c-4004-a223-66db69512a8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c97735c-377c-4004-a223-66db69512a8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c97735c-377c-4004-a223-66db69512a8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c97735c-377c-4004-a223-66db69512a8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c97735c-377c-4004-a223-66db69512a8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c97735c-377c-4004-a223-66db69512a8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c97735c-377c-4004-a223-66db69512a8b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c97735c-377c-4004-a223-66db69512a8b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60976","PortSpecifier":{"PortValue":60976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60976","PortSpecifier":{"PortValue":60976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022144,"nanos":251390093},"http":{"id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"]}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a43ddf26f5c0"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=9537c20b-690b-4316-9ac6-92de6c4d42fa"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0536fa78-b0fd-455c-8bfe-dafac27ee5d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/rate-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2736454a-fec0-4b6b-bd85-5698f788ff8f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57622","PortSpecifier":{"PortValue":57622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57622","PortSpecifier":{"PortValue":57622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022144,"nanos":287266219},"http":{"id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV\"}"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","subscription":"e2e-rate-iso-a-cd3648","tenant":"e2e-shared-a-2fca4d","userId":"1252fcaa-ccc0-4bff-be28-48510103f86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","selected_subscription":"e2e-rate-iso-a-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-cd3648@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6557a8d9-a32c-4b66-9a90-c1c2c20130b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57626","PortSpecifier":{"PortValue":57626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57626","PortSpecifier":{"PortValue":57626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022145,"nanos":321652584},"http":{"id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV"}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV\"}"}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","subscription":"e2e-rate-iso-a-cd3648","tenant":"e2e-shared-a-2fca4d","userId":"1252fcaa-ccc0-4bff-be28-48510103f86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","selected_subscription":"e2e-rate-iso-a-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-cd3648@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb8a684f-9cad-9bc9-ae76-e076d07f0acf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57632","PortSpecifier":{"PortValue":57632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57632","PortSpecifier":{"PortValue":57632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022146,"nanos":362562601},"http":{"id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV"}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV\"}"}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","subscription":"e2e-rate-iso-a-cd3648","tenant":"e2e-shared-a-2fca4d","userId":"1252fcaa-ccc0-4bff-be28-48510103f86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","selected_subscription":"e2e-rate-iso-a-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-cd3648@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f69f300-7a8b-45f4-ae85-70234cbf757e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57640","PortSpecifier":{"PortValue":57640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8582377f-a542-4aa6-9380-077dc1992a1a","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57640","PortSpecifier":{"PortValue":57640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022147,"nanos":402185304},"http":{"id":"8582377f-a542-4aa6-9380-077dc1992a1a","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV"}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV\"}"}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","subscription":"e2e-rate-iso-a-cd3648","tenant":"e2e-shared-a-2fca4d","userId":"1252fcaa-ccc0-4bff-be28-48510103f86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","selected_subscription":"e2e-rate-iso-a-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-cd3648@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8582377f-a542-4aa6-9380-077dc1992a1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57656","PortSpecifier":{"PortValue":57656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79184134-1f1a-42ce-ba7a-e1f02357207c","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57656","PortSpecifier":{"PortValue":57656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022148,"nanos":442267158},"http":{"id":"79184134-1f1a-42ce-ba7a-e1f02357207c","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV"}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV\"}"}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","subscription":"e2e-rate-iso-a-cd3648","tenant":"e2e-shared-a-2fca4d","userId":"1252fcaa-ccc0-4bff-be28-48510103f86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","selected_subscription":"e2e-rate-iso-a-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-cd3648@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79184134-1f1a-42ce-ba7a-e1f02357207c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e568790-77f1-4744-b38a-b0890089043a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57662","PortSpecifier":{"PortValue":57662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e568790-77f1-4744-b38a-b0890089043a","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e568790-77f1-4744-b38a-b0890089043a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57662","PortSpecifier":{"PortValue":57662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022149,"nanos":478284837},"http":{"id":"2e568790-77f1-4744-b38a-b0890089043a","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV"}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV\"}"}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","subscription":"e2e-rate-iso-a-cd3648","tenant":"e2e-shared-a-2fca4d","userId":"1252fcaa-ccc0-4bff-be28-48510103f86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e568790-77f1-4744-b38a-b0890089043a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e568790-77f1-4744-b38a-b0890089043a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","selected_subscription":"e2e-rate-iso-a-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-cd3648@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e568790-77f1-4744-b38a-b0890089043a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e568790-77f1-4744-b38a-b0890089043a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36694","PortSpecifier":{"PortValue":36694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36694","PortSpecifier":{"PortValue":36694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022150,"nanos":516680335},"http":{"id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV"}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV\"}"}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","subscription":"e2e-rate-iso-a-cd3648","tenant":"e2e-shared-a-2fca4d","userId":"1252fcaa-ccc0-4bff-be28-48510103f86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","selected_subscription":"e2e-rate-iso-a-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-cd3648@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d30db27-c3a9-4041-99d3-1bb21e2ae66d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36698","PortSpecifier":{"PortValue":36698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75ee31c5-549d-41ef-a3dc-385259bc366d","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36698","PortSpecifier":{"PortValue":36698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022151,"nanos":553757666},"http":{"id":"75ee31c5-549d-41ef-a3dc-385259bc366d","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV"}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV\"}"}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","subscription":"e2e-rate-iso-a-cd3648","tenant":"e2e-shared-a-2fca4d","userId":"1252fcaa-ccc0-4bff-be28-48510103f86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","selected_subscription":"e2e-rate-iso-a-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-cd3648@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75ee31c5-549d-41ef-a3dc-385259bc366d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36714","PortSpecifier":{"PortValue":36714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","method":"POST","path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions","host":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36714","PortSpecifier":{"PortValue":36714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022152,"nanos":591042231},"http":{"id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","method":"POST","headers":{":authority":"e2e-shared-a-2fca4d.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vDVRU7aTzX6tQ3r4_nqATQGcuRR2OkLBjUGFufj2bofY1oUbSxNQz1fh43VV\"}"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","subscription":"e2e-rate-iso-a-cd3648","tenant":"e2e-shared-a-2fca4d","userId":"1252fcaa-ccc0-4bff-be28-48510103f86b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\",\"requestedSubscription\":\"e2e-rate-iso-a-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2fca4d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1252fcaa-ccc0-4bff-be28-48510103f86b","keyName":"e2e-rate-a-cd3648","selected_subscription":"e2e-rate-iso-a-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-a-2fca4d/e2e-rate-iso-a-cd3648@ai-tenant-e2e-shared-a-2fca4d/rate-test-model-2fca4d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2fca4d","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-cd3648","namespace":"ai-tenant-e2e-shared-a-2fca4d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec2e9a72-97ed-4561-b404-4a8686e3f300","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46406","PortSpecifier":{"PortValue":46406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","method":"POST","path":"/ai-tenant-e2e-shared-b-f9d728/rate-test-model-f9d728/v1/completions","host":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:46406","PortSpecifier":{"PortValue":46406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783022152,"nanos":629625094},"http":{"id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","method":"POST","headers":{":authority":"e2e-shared-b-f9d728.apps.f37af604-827d-4b1e-b2e7-a43ddf26f5c0.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f9d728/rate-test-model-f9d728/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mT30WJBLKKbDoiwj_mRSHyZ4i1yPkNH4bLZnb1saRG3gfFhuEovRwzg13UQM"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mT30WJBLKKbDoiwj_mRSHyZ4i1yPkNH4bLZnb1saRG3gfFhuEovRwzg13UQM\"}"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"88207aca-e71d-4e81-ba96-c27bf7c2bcd5","keyName":"e2e-rate-b-cd3648","subscription":"e2e-rate-iso-b-cd3648","tenant":"e2e-shared-b-f9d728","userId":"88207aca-e71d-4e81-ba96-c27bf7c2bcd5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f9d728/rate-test-model-f9d728\",\"requestedSubscription\":\"e2e-rate-iso-b-cd3648\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f9d728.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f9d728","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cd3648","namespace":"ai-tenant-e2e-shared-b-f9d728","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f9d728/rate-test-model-f9d728\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-cd3648"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"88207aca-e71d-4e81-ba96-c27bf7c2bcd5","keyName":"e2e-rate-b-cd3648","selected_subscription":"e2e-rate-iso-b-cd3648","selected_subscription_key":"ai-tenant-e2e-shared-b-f9d728/e2e-rate-iso-b-cd3648@ai-tenant-e2e-shared-b-f9d728/rate-test-model-f9d728","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f9d728","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-cd3648","namespace":"ai-tenant-e2e-shared-b-f9d728","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-02T19:55:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d0feecb7-b010-4041-a61e-2d15cc401cdc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-02T19:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bee434e3fb4c810be941e79afd04e7dbaee2f5195449cc7c0c0c358c2e68ea1"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d17cc73f0a37e8116def3b6a5a1c5072c2f0ee6575d0f90891c708d29be8ddd"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/850534fa0cdbb991bfb075008d3225736952c988937168c31d24c62f51ce43b3"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c12297ed5d610842fbdc3a8db846ea6fc7a2850cf4e227c7fba355a8f7891d78"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71a1eb8a6f1d34ffb8de608759ef0a698162fb6985064a3e3484849c721bad6a"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28bef88d32f2cd20b5010f450b5a34f7c27b94d332e4cf61cf41d73157d195a4"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21203a2b1d9dd6b10ed90520f7b45e8e896fed96c318c1d69be590568f896fc4"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d1ebcf330c3033aeae7ddf320ff9d9e3b36d481a05cb004790d88f496b86f65"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7403e9577842df610c24958c550c0fe966eb94e2ebe3883f1550e011b2f4217d"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c6cd617b6ed1a799a035f3cbf3949bd120c307dff8a0d3097073f86022d221d"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5bda487471bfce70869c69093b8009a469502e2d629bb4845ee0731e518c59b"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/caa12846d6c7a46b153067b92cc28abbbe30621e60acec1a86f3d6b9b9e8ba43"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/524e482e9b350cd4a5920d8a8e171b6fc0a8d474aac0c8cc61fe4caa546ff0c5"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61e3a6c3539ef45ffa4da6485c1bb6565794d8972e2f338e524c03c0bb536933"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf07081b2f04f8e2498a6b067ead17b921dbb2092c0347ea564afbca68bfbad4"}
{"level":"info","ts":"2026-07-02T19:55:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c687b9cbfd095dffaab243dc13bfb681ae35c372d4b4d7e6fc20d080b272c97"}
{"level":"info","ts":"2026-07-02T19:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7bc781ee50a080e4b1837e6233657e1f6945b0ab3c1212b87a35a342dd4b376"}
{"level":"info","ts":"2026-07-02T19:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5373979ea596dbbc9247fb4c839f56cf020e689865c889156df7a87908999737"}
{"level":"info","ts":"2026-07-02T19:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a66bfc1423e1fc9a805cf4b32d17a0741138eb4e48024d53a7167d597d09a41e"}
{"level":"info","ts":"2026-07-02T19:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9c3ec971c613f21f6413aaaac21d1f364df0a50e85ec0a52545937d445f9eac"}