{"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"} {"level":"error","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"} {"level":"info","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"error","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec20ad8ee14f3faf4ec904e6a3f054b1889afdf1546fd668e372ecc86cb8c19f"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec20ad8ee14f3faf4ec904e6a3f054b1889afdf1546fd668e372ecc86cb8c19f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec20ad8ee14f3faf4ec904e6a3f054b1889afdf1546fd668e372ecc86cb8c19f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec20ad8ee14f3faf4ec904e6a3f054b1889afdf1546fd668e372ecc86cb8c19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec20ad8ee14f3faf4ec904e6a3f054b1889afdf1546fd668e372ecc86cb8c19f"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49fd5287c3edf7cd91ee0e8d3322953024a955803270e07ec0882a3c6885903d"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec20ad8ee14f3faf4ec904e6a3f054b1889afdf1546fd668e372ecc86cb8c19f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49fd5287c3edf7cd91ee0e8d3322953024a955803270e07ec0882a3c6885903d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49fd5287c3edf7cd91ee0e8d3322953024a955803270e07ec0882a3c6885903d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49fd5287c3edf7cd91ee0e8d3322953024a955803270e07ec0882a3c6885903d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49fd5287c3edf7cd91ee0e8d3322953024a955803270e07ec0882a3c6885903d"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68ef705347b3891d68abd45efdd68264b6545c46bee429327ff5123d9ef423d"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49fd5287c3edf7cd91ee0e8d3322953024a955803270e07ec0882a3c6885903d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e68ef705347b3891d68abd45efdd68264b6545c46bee429327ff5123d9ef423d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e68ef705347b3891d68abd45efdd68264b6545c46bee429327ff5123d9ef423d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e68ef705347b3891d68abd45efdd68264b6545c46bee429327ff5123d9ef423d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f692539a80b1444e2c4f0d0331cdb2094dbffbc46daca9e908731878f136439"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88b74c1d49f26d20d797e035b55403986acdbb169e00892d53acf61c18e34e1e"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f692539a80b1444e2c4f0d0331cdb2094dbffbc46daca9e908731878f136439","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f692539a80b1444e2c4f0d0331cdb2094dbffbc46daca9e908731878f136439"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751a9dc4832c175ca656e338172fb4cbd7a6f6e75c4b310836b766c81837a8a7"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2282c2c4245a4883d88263bfa74c234132a332706962a176ded5a279b212ac0"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f692539a80b1444e2c4f0d0331cdb2094dbffbc46daca9e908731878f136439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88b74c1d49f26d20d797e035b55403986acdbb169e00892d53acf61c18e34e1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88b74c1d49f26d20d797e035b55403986acdbb169e00892d53acf61c18e34e1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5423845eb28b342c2ab85fde686ba15dc7190a282052adb4a99375a56c67dc"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88b74c1d49f26d20d797e035b55403986acdbb169e00892d53acf61c18e34e1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e68ef705347b3891d68abd45efdd68264b6545c46bee429327ff5123d9ef423d"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f692539a80b1444e2c4f0d0331cdb2094dbffbc46daca9e908731878f136439"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88b74c1d49f26d20d797e035b55403986acdbb169e00892d53acf61c18e34e1e"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751a9dc4832c175ca656e338172fb4cbd7a6f6e75c4b310836b766c81837a8a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["751a9dc4832c175ca656e338172fb4cbd7a6f6e75c4b310836b766c81837a8a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751a9dc4832c175ca656e338172fb4cbd7a6f6e75c4b310836b766c81837a8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2282c2c4245a4883d88263bfa74c234132a332706962a176ded5a279b212ac0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2282c2c4245a4883d88263bfa74c234132a332706962a176ded5a279b212ac0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751a9dc4832c175ca656e338172fb4cbd7a6f6e75c4b310836b766c81837a8a7"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2282c2c4245a4883d88263bfa74c234132a332706962a176ded5a279b212ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef5423845eb28b342c2ab85fde686ba15dc7190a282052adb4a99375a56c67dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef5423845eb28b342c2ab85fde686ba15dc7190a282052adb4a99375a56c67dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2282c2c4245a4883d88263bfa74c234132a332706962a176ded5a279b212ac0"} {"level":"info","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef5423845eb28b342c2ab85fde686ba15dc7190a282052adb4a99375a56c67dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef5423845eb28b342c2ab85fde686ba15dc7190a282052adb4a99375a56c67dc"} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af"} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e68ef705347b3891d68abd45efdd68264b6545c46bee429327ff5123d9ef423d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f692539a80b1444e2c4f0d0331cdb2094dbffbc46daca9e908731878f136439","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88b74c1d49f26d20d797e035b55403986acdbb169e00892d53acf61c18e34e1e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751a9dc4832c175ca656e338172fb4cbd7a6f6e75c4b310836b766c81837a8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2282c2c4245a4883d88263bfa74c234132a332706962a176ded5a279b212ac0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef5423845eb28b342c2ab85fde686ba15dc7190a282052adb4a99375a56c67dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:31:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"} {"level":"error","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:31:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55198","PortSpecifier":{"PortValue":55198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55198","PortSpecifier":{"PortValue":55198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687500,"nanos":185609398},"http":{"id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","method":"POST","headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce64ecdb-ca9a-4ef0-bdeb-d3027de32c38","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10b772c1-0287-48e5-bb9e-74915cb337ae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f90f60be261d"]}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f90f60be261d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10b772c1-0287-48e5-bb9e-74915cb337ae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce64ecdb-ca9a-4ef0-bdeb-d3027de32c38","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9d0056/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1091a15-9dc7-4d5b-b31f-2439262fb14b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:58360","PortSpecifier":{"PortValue":58360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a73722.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:58360","PortSpecifier":{"PortValue":58360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687500,"nanos":236105316},"http":{"id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","method":"POST","headers":{":authority":"e2e-shared-b-a73722.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce64ecdb-ca9a-4ef0-bdeb-d3027de32c38","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10b772c1-0287-48e5-bb9e-74915cb337ae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f90f60be261d"]}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f90f60be261d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10b772c1-0287-48e5-bb9e-74915cb337ae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce64ecdb-ca9a-4ef0-bdeb-d3027de32c38","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f692539a80b1444e2c4f0d0331cdb2094dbffbc46daca9e908731878f136439"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a73722.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a73722/rate-test-model-a73722\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a73722/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6273e2f0-1f14-48f7-814b-b6e8371ce63b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55202","PortSpecifier":{"PortValue":55202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","method":"POST","path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions","host":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55202","PortSpecifier":{"PortValue":55202}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687500,"nanos":281909952},"http":{"id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","method":"POST","headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Q4J90vOkMP4wiFKM_EbgqOeYJ0qpeHozATn5q8kN0Wdl4boY33BqtJeNQ4W9"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Q4J90vOkMP4wiFKM_EbgqOeYJ0qpeHozATn5q8kN0Wdl4boY33BqtJeNQ4W9\"}"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2f736ad-1033-49ba-bad1-68718395babe","keyName":"e2e-rate-a-d963d1","subscription":"e2e-rate-iso-a-d963d1","tenant":"e2e-shared-a-9d0056","userId":"d2f736ad-1033-49ba-bad1-68718395babe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\",\"requestedSubscription\":\"e2e-rate-iso-a-d963d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d963d1","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9d0056/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d963d1"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2f736ad-1033-49ba-bad1-68718395babe","keyName":"e2e-rate-a-d963d1","selected_subscription":"e2e-rate-iso-a-d963d1","selected_subscription_key":"ai-tenant-e2e-shared-a-9d0056/e2e-rate-iso-a-d963d1@ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d963d1","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e388df6-c2f6-4f19-b68e-196f95d9814d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55214","PortSpecifier":{"PortValue":55214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","method":"POST","path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions","host":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55214","PortSpecifier":{"PortValue":55214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687501,"nanos":372435106},"http":{"id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","method":"POST","headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Q4J90vOkMP4wiFKM_EbgqOeYJ0qpeHozATn5q8kN0Wdl4boY33BqtJeNQ4W9"} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Q4J90vOkMP4wiFKM_EbgqOeYJ0qpeHozATn5q8kN0Wdl4boY33BqtJeNQ4W9\"}"} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2f736ad-1033-49ba-bad1-68718395babe","keyName":"e2e-rate-a-d963d1","subscription":"e2e-rate-iso-a-d963d1","tenant":"e2e-shared-a-9d0056","userId":"d2f736ad-1033-49ba-bad1-68718395babe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\",\"requestedSubscription\":\"e2e-rate-iso-a-d963d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d963d1","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"}} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9d0056/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d963d1"} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2f736ad-1033-49ba-bad1-68718395babe","keyName":"e2e-rate-a-d963d1","selected_subscription":"e2e-rate-iso-a-d963d1","selected_subscription_key":"ai-tenant-e2e-shared-a-9d0056/e2e-rate-iso-a-d963d1@ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d963d1","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"744b75e0-5a45-4d7b-bbe7-153cc680d2a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55226","PortSpecifier":{"PortValue":55226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","method":"POST","path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions","host":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:55226","PortSpecifier":{"PortValue":55226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687502,"nanos":412718287},"http":{"id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","method":"POST","headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Q4J90vOkMP4wiFKM_EbgqOeYJ0qpeHozATn5q8kN0Wdl4boY33BqtJeNQ4W9"} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Q4J90vOkMP4wiFKM_EbgqOeYJ0qpeHozATn5q8kN0Wdl4boY33BqtJeNQ4W9\"}"} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2f736ad-1033-49ba-bad1-68718395babe","keyName":"e2e-rate-a-d963d1","subscription":"e2e-rate-iso-a-d963d1","tenant":"e2e-shared-a-9d0056","userId":"d2f736ad-1033-49ba-bad1-68718395babe","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\",\"requestedSubscription\":\"e2e-rate-iso-a-d963d1\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d963d1","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"}} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9d0056/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d963d1"} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2f736ad-1033-49ba-bad1-68718395babe","keyName":"e2e-rate-a-d963d1","selected_subscription":"e2e-rate-iso-a-d963d1","selected_subscription_key":"ai-tenant-e2e-shared-a-9d0056/e2e-rate-iso-a-d963d1@ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d963d1","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4687408a-4491-4a17-a2a3-228bf20ff8f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:47970","PortSpecifier":{"PortValue":47970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:47970","PortSpecifier":{"PortValue":47970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687513,"nanos":470650889},"http":{"id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","method":"POST","headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce64ecdb-ca9a-4ef0-bdeb-d3027de32c38","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10b772c1-0287-48e5-bb9e-74915cb337ae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f90f60be261d"]}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f90f60be261d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10b772c1-0287-48e5-bb9e-74915cb337ae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce64ecdb-ca9a-4ef0-bdeb-d3027de32c38","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9d0056/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bd1801d7-da86-4aa0-92ef-ad95e9625025","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5352a3a-0333-456a-99f0-40d9819af798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:41788","PortSpecifier":{"PortValue":41788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5352a3a-0333-456a-99f0-40d9819af798","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-a73722.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5352a3a-0333-456a-99f0-40d9819af798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:41788","PortSpecifier":{"PortValue":41788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687513,"nanos":515588310},"http":{"id":"b5352a3a-0333-456a-99f0-40d9819af798","method":"POST","headers":{":authority":"e2e-shared-b-a73722.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5352a3a-0333-456a-99f0-40d9819af798","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5352a3a-0333-456a-99f0-40d9819af798","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ce64ecdb-ca9a-4ef0-bdeb-d3027de32c38","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=10b772c1-0287-48e5-bb9e-74915cb337ae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f90f60be261d"]}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5352a3a-0333-456a-99f0-40d9819af798","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f90f60be261d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=10b772c1-0287-48e5-bb9e-74915cb337ae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ce64ecdb-ca9a-4ef0-bdeb-d3027de32c38","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9f692539a80b1444e2c4f0d0331cdb2094dbffbc46daca9e908731878f136439"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.135.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-a73722.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5352a3a-0333-456a-99f0-40d9819af798","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5352a3a-0333-456a-99f0-40d9819af798","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5352a3a-0333-456a-99f0-40d9819af798","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a73722/rate-test-model-a73722\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a73722/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5352a3a-0333-456a-99f0-40d9819af798","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5352a3a-0333-456a-99f0-40d9819af798","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5352a3a-0333-456a-99f0-40d9819af798","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5352a3a-0333-456a-99f0-40d9819af798","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5352a3a-0333-456a-99f0-40d9819af798","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:47984","PortSpecifier":{"PortValue":47984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","method":"POST","path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions","host":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:47984","PortSpecifier":{"PortValue":47984}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687513,"nanos":559807262},"http":{"id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","method":"POST","headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ykLlU54v8x5dFebQ_dujQCpKIeLwLheawuD6dFjeULGgTWFpw97rZi18ZI5g"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ykLlU54v8x5dFebQ_dujQCpKIeLwLheawuD6dFjeULGgTWFpw97rZi18ZI5g\"}"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f9213e9-368f-44f9-825a-bb9bcc91a735","keyName":"e2e-rate-a-c32bab","subscription":"e2e-rate-iso-a-c32bab","tenant":"e2e-shared-a-9d0056","userId":"1f9213e9-368f-44f9-825a-bb9bcc91a735","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\",\"requestedSubscription\":\"e2e-rate-iso-a-c32bab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c32bab","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9d0056/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c32bab"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1f9213e9-368f-44f9-825a-bb9bcc91a735","keyName":"e2e-rate-a-c32bab","selected_subscription":"e2e-rate-iso-a-c32bab","selected_subscription_key":"ai-tenant-e2e-shared-a-9d0056/e2e-rate-iso-a-c32bab@ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c32bab","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c759ec6b-7a96-4a91-80c8-c10962bc7378","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:47990","PortSpecifier":{"PortValue":47990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","method":"POST","path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions","host":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:47990","PortSpecifier":{"PortValue":47990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687514,"nanos":598249352},"http":{"id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","method":"POST","headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ykLlU54v8x5dFebQ_dujQCpKIeLwLheawuD6dFjeULGgTWFpw97rZi18ZI5g"} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ykLlU54v8x5dFebQ_dujQCpKIeLwLheawuD6dFjeULGgTWFpw97rZi18ZI5g\"}"} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f9213e9-368f-44f9-825a-bb9bcc91a735","keyName":"e2e-rate-a-c32bab","subscription":"e2e-rate-iso-a-c32bab","tenant":"e2e-shared-a-9d0056","userId":"1f9213e9-368f-44f9-825a-bb9bcc91a735","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\",\"requestedSubscription\":\"e2e-rate-iso-a-c32bab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c32bab","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"}} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9d0056/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c32bab"} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1f9213e9-368f-44f9-825a-bb9bcc91a735","keyName":"e2e-rate-a-c32bab","selected_subscription":"e2e-rate-iso-a-c32bab","selected_subscription_key":"ai-tenant-e2e-shared-a-9d0056/e2e-rate-iso-a-c32bab@ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c32bab","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04fdfd77-1ea5-4e1e-b19f-3caf26e12d32","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:47992","PortSpecifier":{"PortValue":47992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","method":"POST","path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions","host":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:47992","PortSpecifier":{"PortValue":47992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687515,"nanos":642596560},"http":{"id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","method":"POST","headers":{":authority":"e2e-shared-a-9d0056.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ykLlU54v8x5dFebQ_dujQCpKIeLwLheawuD6dFjeULGgTWFpw97rZi18ZI5g"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ykLlU54v8x5dFebQ_dujQCpKIeLwLheawuD6dFjeULGgTWFpw97rZi18ZI5g\"}"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1f9213e9-368f-44f9-825a-bb9bcc91a735","keyName":"e2e-rate-a-c32bab","subscription":"e2e-rate-iso-a-c32bab","tenant":"e2e-shared-a-9d0056","userId":"1f9213e9-368f-44f9-825a-bb9bcc91a735","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\",\"requestedSubscription\":\"e2e-rate-iso-a-c32bab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9d0056.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c32bab","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-9d0056/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-c32bab"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1f9213e9-368f-44f9-825a-bb9bcc91a735","keyName":"e2e-rate-a-c32bab","selected_subscription":"e2e-rate-iso-a-c32bab","selected_subscription_key":"ai-tenant-e2e-shared-a-9d0056/e2e-rate-iso-a-c32bab@ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9d0056","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-c32bab","namespace":"ai-tenant-e2e-shared-a-9d0056","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-9d0056/rate-test-model-9d0056"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0944a7c-d3b8-45d6-aa69-cb51c73c9256","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bec5164-6557-46b8-9028-28e1ade6c79f","method":"POST","path":"/ai-tenant-e2e-shared-b-a73722/rate-test-model-a73722/v1/completions","host":"e2e-shared-b-a73722.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.14:41804","PortSpecifier":{"PortValue":41804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.135.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687515,"nanos":682397601},"http":{"id":"0bec5164-6557-46b8-9028-28e1ade6c79f","method":"POST","headers":{":authority":"e2e-shared-b-a73722.apps.bbfa8fd8-ab43-44f0-80d2-f90f60be261d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-a73722/rate-test-model-a73722/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12RKf8bm0lEdU5V7E_AdmDi7lUM3FG3yIhOArbYpSXYwLbkk7kdNj9ABv7gYZ"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-a73722.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12RKf8bm0lEdU5V7E_AdmDi7lUM3FG3yIhOArbYpSXYwLbkk7kdNj9ABv7gYZ\"}"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a73722.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a672d701-24f0-446f-ac82-091ed1281b9f","keyName":"e2e-rate-b-c32bab","subscription":"e2e-rate-iso-b-c32bab","tenant":"e2e-shared-b-a73722","userId":"a672d701-24f0-446f-ac82-091ed1281b9f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-a73722.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-a73722/rate-test-model-a73722\",\"requestedSubscription\":\"e2e-rate-iso-b-c32bab\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-a73722.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-a73722","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c32bab","namespace":"ai-tenant-e2e-shared-b-a73722","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a73722/rate-test-model-a73722"}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-a73722/rate-test-model-a73722\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-a73722/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-c32bab"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"a672d701-24f0-446f-ac82-091ed1281b9f","keyName":"e2e-rate-b-c32bab","selected_subscription":"e2e-rate-iso-b-c32bab","selected_subscription_key":"ai-tenant-e2e-shared-b-a73722/e2e-rate-iso-b-c32bab@ai-tenant-e2e-shared-b-a73722/rate-test-model-a73722","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-a73722","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-c32bab","namespace":"ai-tenant-e2e-shared-b-a73722","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-a73722/rate-test-model-a73722"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:31:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bec5164-6557-46b8-9028-28e1ade6c79f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde0d1361643fdaebb3c5c21659d392948a87962b5cc305cae9991208ab01bd2"} {"level":"info","ts":"2026-07-22T02:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f71561ecc21f64f88c8c202f189d196aa7043b602a01c1e69f88b5083f2b6e32"} {"level":"info","ts":"2026-07-22T02:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e68ef705347b3891d68abd45efdd68264b6545c46bee429327ff5123d9ef423d"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f692539a80b1444e2c4f0d0331cdb2094dbffbc46daca9e908731878f136439"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2282c2c4245a4883d88263bfa74c234132a332706962a176ded5a279b212ac0"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bea689798c15b517935ded43acf9c693ba4d62bf9fba13ab6595e28a8d95e6e6"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c8e748aa75c0529b6956098cf3e1d159a50ce711462cc51b9fb69fa346abf67"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c50527b6e3b9e95dd51a93e086e16b34aece2875d1964a9f521185849c99354d"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e983f8d259eff9771f58ce6f7b2d38027f0c0212db4610d245ed85c97e49820"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef5423845eb28b342c2ab85fde686ba15dc7190a282052adb4a99375a56c67dc"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3675bca960c28b448a3303d35b32e63c2e0635299d706f0f81dc598969ce97ac"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec20ad8ee14f3faf4ec904e6a3f054b1889afdf1546fd668e372ecc86cb8c19f"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40515db25ed1fee2413e2ef89f3991b7a327016c5f3bd3e9dfc4b94d5d3ba58c"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6927d80de2becc06070d261472afbe500149c3a7bbbb91ff971de4784994dce8"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/751a9dc4832c175ca656e338172fb4cbd7a6f6e75c4b310836b766c81837a8a7"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88b74c1d49f26d20d797e035b55403986acdbb169e00892d53acf61c18e34e1e"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abf0f54407b19edc24b2cd380cc28c90250c07d49373e0e270f229238124adcf"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49fd5287c3edf7cd91ee0e8d3322953024a955803270e07ec0882a3c6885903d"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ac0d7a1b2ee7677ae61d83809316ea7eb5d94e80d17458af09a9223e851e7b6"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c728dc9e933e7c8a23535984eb71921e5a842d9fcdb7e36bc5acfe15185609e0"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c16863bbd4f50c41d715d1ac88ed4a0e321ebacd4503289c1e96324f797052af"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea0871baf7412915055253bf29646879f5d6d9ce4f17ab3c3f6180e165b5e753"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eecbeb16d3382c0219260e1998691742759d2549fe304042c2ac88f2627db846"} {"level":"info","ts":"2026-07-22T02:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e77c67540c043a47688d73bca27b2a354d922391918c263fd38250aca9ef7893"}