--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b158ad04-dfa6-405b-aa47-0c217fcfca70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b158ad04-dfa6-405b-aa47-0c217fcfca70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b158ad04-dfa6-405b-aa47-0c217fcfca70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57966","PortSpecifier":{"PortValue":57966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:57966","PortSpecifier":{"PortValue":57966}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854457,"nanos":490664652},"http":{"id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","method":"GET","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16YR9g4gWPzHkmTJH_saGtbFd7se7uQYqapnyVTDlkW9OrS6Wuuniv9anzyjz"}
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16YR9g4gWPzHkmTJH_saGtbFd7se7uQYqapnyVTDlkW9OrS6Wuuniv9anzyjz\"}"}
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-24T00:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3b6edcc4-b75c-4a8a-8715-b20627ceee61","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:54:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:54:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"info","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"error","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"error","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:54:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"info","ts":"2026-07-24T00:54:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45614","PortSpecifier":{"PortValue":45614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45614","PortSpecifier":{"PortValue":45614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854474,"nanos":762023566},"http":{"id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/auth-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9fcfd11-e3df-4ce3-888b-eb5ca9791791","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35614","PortSpecifier":{"PortValue":35614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35614","PortSpecifier":{"PortValue":35614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854474,"nanos":803485001},"http":{"id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/auth-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d27f8cf7-ba63-4e85-8685-6037c3933ecb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45624","PortSpecifier":{"PortValue":45624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7314781-e9b7-4021-8f76-b9c311c4567f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45624","PortSpecifier":{"PortValue":45624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854474,"nanos":839850982},"http":{"id":"c7314781-e9b7-4021-8f76-b9c311c4567f","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/auth-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7314781-e9b7-4021-8f76-b9c311c4567f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35630","PortSpecifier":{"PortValue":35630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35630","PortSpecifier":{"PortValue":35630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854474,"nanos":874001561},"http":{"id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/auth-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b33981c-2e3c-4cf2-a53c-1b0b95e3bc6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"info","ts":"2026-07-24T00:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:54:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"error","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"error","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"error","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:54:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:54:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"debug","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:54:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:54:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45890","PortSpecifier":{"PortValue":45890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45890","PortSpecifier":{"PortValue":45890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854492,"nanos":115625298},"http":{"id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/auth-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7dff5e9-4215-4e5f-9a17-1b2e9f813be5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33186","PortSpecifier":{"PortValue":33186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33186","PortSpecifier":{"PortValue":33186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854492,"nanos":150367051},"http":{"id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/auth-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83d2999e-de8e-4be7-b57c-c686574f3ee1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33188","PortSpecifier":{"PortValue":33188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","method":"GET","path":"/maas-api/v1/api-keys/68b12489-bdfe-4cda-8307-41ecf6bae087","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:33188","PortSpecifier":{"PortValue":33188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854492,"nanos":189493681},"http":{"id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","method":"GET","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/68b12489-bdfe-4cda-8307-41ecf6bae087",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/68b12489-bdfe-4cda-8307-41ecf6bae087",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/auth-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ce07d4a-f67f-4e1f-91cd-07f75cb4e97d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45898","PortSpecifier":{"PortValue":45898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fae41b10-4713-4d96-9674-9396ba4b30b9","method":"GET","path":"/maas-api/v1/api-keys/68b12489-bdfe-4cda-8307-41ecf6bae087","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45898","PortSpecifier":{"PortValue":45898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854492,"nanos":223252243},"http":{"id":"fae41b10-4713-4d96-9674-9396ba4b30b9","method":"GET","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/68b12489-bdfe-4cda-8307-41ecf6bae087",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/68b12489-bdfe-4cda-8307-41ecf6bae087",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/auth-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae41b10-4713-4d96-9674-9396ba4b30b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"info","ts":"2026-07-24T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"info","ts":"2026-07-24T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"info","ts":"2026-07-24T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39808","PortSpecifier":{"PortValue":39808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39808","PortSpecifier":{"PortValue":39808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854507,"nanos":367982034},"http":{"id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/auth-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f3b110d-b9b4-4bdc-beb6-7f6e243d4802","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50986","PortSpecifier":{"PortValue":50986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:50986","PortSpecifier":{"PortValue":50986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854507,"nanos":413593046},"http":{"id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/auth-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e8bac3a-0f92-45ec-8d23-5ad5dcfadde1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39812","PortSpecifier":{"PortValue":39812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74d27c68-31e7-47b4-88dd-2d2d87588787","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39812","PortSpecifier":{"PortValue":39812}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854507,"nanos":452241826},"http":{"id":"74d27c68-31e7-47b4-88dd-2d2d87588787","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HKQCbq9d71Cs3pVG_e6NMBDvL1FCBOgTmJEMT5EMT8tkB5bUBjXUXPFQA4fT"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HKQCbq9d71Cs3pVG_e6NMBDvL1FCBOgTmJEMT5EMT8tkB5bUBjXUXPFQA4fT\"}"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0be8d172-dbc7-42fa-855d-285d93bfacae","keyName":"e2e-auth-iso-a-a40274","subscription":"e2e-auth-iso-15d33c","tenant":"e2e-shared-a-38da25","userId":"0be8d172-dbc7-42fa-855d-285d93bfacae","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/auth-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-15d33c"}
{"level":"info","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:55:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74d27c68-31e7-47b4-88dd-2d2d87588787","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/848374848e4a3859d3eb1ea76cbafd6add8a8d8fce2f06b538b8c8a2046421fa"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e118fa310076eb67b6f4b26e05a16e9682ac1f11e759e57864a609d87cbaefbf"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21ef0c6d1753950ab99879f10af8a7fd0686c7fc1bc360dd604ec929127935e6"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00731d3d3c41e06cdece0e98b76bbaf66e7db5d8f8b1328e07afaadeb347c220"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c180c1207096caa3e62164693f3a95ce1cba66bffd701c9800c393cb44e2bb3c"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c0ec48a4dcdda1185bdef88c486e44f4bf12175edbd628104e9021879bdc88a"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1924153a47840f15a11c135172060e3c208e799f7eb4bb5bf12e3c1c9c997754"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81d7f42f43294bd0ecf7f0aafa6e34191a815cc9640824eec317ee6a6f00fcf5"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56ac63cf953e03f30fa94b414a8867f0a8ebf74ab6d3a6b321658e8c95bd9e85"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e54f558da0f897fea20901d70255ea5a44b3e876764dcabecb06b0b479230a2"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a96e64ea0268e8b29aa28962f3141a37da96c30bf8bc2f10d2e77e0c2f066fc0"}
{"level":"info","ts":"2026-07-24T00:55:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5763dd27bcbe937d7d64e24317fb5b4f4c559eccfd5c03d451e5003031e9277"}
{"level":"info","ts":"2026-07-24T00:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e39825e37714a51917fb64e208478add70b7298a5cbc1c7baaf518a646db5828"}
{"level":"info","ts":"2026-07-24T00:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c5e37742ca2f5039c560c014536369f153ddc84aabf66cd6bfb57feedda8969"}
{"level":"info","ts":"2026-07-24T00:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0feba83de4b226c2dd61eaafe3c0e9576af1ccb55b9f07ebf691f3612fa2ca95"}
{"level":"info","ts":"2026-07-24T00:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/336901133b388c7fb7cb30ea1b8cc50c4191237fb2cf746e1337c1225d2a9433"}
{"level":"info","ts":"2026-07-24T00:55:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474"}
{"level":"error","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"error","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9"}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9"}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d930a7c13be30c061c2409f99e09d85b8b358c532728d5a169ed7deada7252b2"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ce81fdd4f46a14f8c80c11defc3219be4e500c5940983b09d21dc95e09bb2b"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d930a7c13be30c061c2409f99e09d85b8b358c532728d5a169ed7deada7252b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d930a7c13be30c061c2409f99e09d85b8b358c532728d5a169ed7deada7252b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24558de5cd5e0222b5f075965bde13a718cf1f8a3c5f80b49e454119746b5c9b"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53a6b503a1206f62a1d1e95b3a399be735214c544f90416c346d819d9afa124"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d930a7c13be30c061c2409f99e09d85b8b358c532728d5a169ed7deada7252b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"46ce81fdd4f46a14f8c80c11defc3219be4e500c5940983b09d21dc95e09bb2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["46ce81fdd4f46a14f8c80c11defc3219be4e500c5940983b09d21dc95e09bb2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c30d7f397663ffd16bc49a33e6322e3e4f3cdebf1d483c89b23f992f64732e"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"46ce81fdd4f46a14f8c80c11defc3219be4e500c5940983b09d21dc95e09bb2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1be04975979194db1eb65af0aee451a381ecf02e65bf9988b0d8c93709c1acf"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fab80255fdb7448e770c0b804a13bd0c037a43e5a2e6314f358494dd29e2b17"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24558de5cd5e0222b5f075965bde13a718cf1f8a3c5f80b49e454119746b5c9b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24558de5cd5e0222b5f075965bde13a718cf1f8a3c5f80b49e454119746b5c9b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d930a7c13be30c061c2409f99e09d85b8b358c532728d5a169ed7deada7252b2"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/46ce81fdd4f46a14f8c80c11defc3219be4e500c5940983b09d21dc95e09bb2b"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24558de5cd5e0222b5f075965bde13a718cf1f8a3c5f80b49e454119746b5c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53a6b503a1206f62a1d1e95b3a399be735214c544f90416c346d819d9afa124","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f53a6b503a1206f62a1d1e95b3a399be735214c544f90416c346d819d9afa124"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24558de5cd5e0222b5f075965bde13a718cf1f8a3c5f80b49e454119746b5c9b"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53a6b503a1206f62a1d1e95b3a399be735214c544f90416c346d819d9afa124","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c30d7f397663ffd16bc49a33e6322e3e4f3cdebf1d483c89b23f992f64732e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c30d7f397663ffd16bc49a33e6322e3e4f3cdebf1d483c89b23f992f64732e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53a6b503a1206f62a1d1e95b3a399be735214c544f90416c346d819d9afa124"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c30d7f397663ffd16bc49a33e6322e3e4f3cdebf1d483c89b23f992f64732e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c30d7f397663ffd16bc49a33e6322e3e4f3cdebf1d483c89b23f992f64732e"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1be04975979194db1eb65af0aee451a381ecf02e65bf9988b0d8c93709c1acf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1be04975979194db1eb65af0aee451a381ecf02e65bf9988b0d8c93709c1acf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1be04975979194db1eb65af0aee451a381ecf02e65bf9988b0d8c93709c1acf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1be04975979194db1eb65af0aee451a381ecf02e65bf9988b0d8c93709c1acf"}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fab80255fdb7448e770c0b804a13bd0c037a43e5a2e6314f358494dd29e2b17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fab80255fdb7448e770c0b804a13bd0c037a43e5a2e6314f358494dd29e2b17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fab80255fdb7448e770c0b804a13bd0c037a43e5a2e6314f358494dd29e2b17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fab80255fdb7448e770c0b804a13bd0c037a43e5a2e6314f358494dd29e2b17"}
{"level":"info","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d930a7c13be30c061c2409f99e09d85b8b358c532728d5a169ed7deada7252b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"46ce81fdd4f46a14f8c80c11defc3219be4e500c5940983b09d21dc95e09bb2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24558de5cd5e0222b5f075965bde13a718cf1f8a3c5f80b49e454119746b5c9b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f53a6b503a1206f62a1d1e95b3a399be735214c544f90416c346d819d9afa124","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c30d7f397663ffd16bc49a33e6322e3e4f3cdebf1d483c89b23f992f64732e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1be04975979194db1eb65af0aee451a381ecf02e65bf9988b0d8c93709c1acf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fab80255fdb7448e770c0b804a13bd0c037a43e5a2e6314f358494dd29e2b17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:55:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:55:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:55:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:55:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"error","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:55:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35660","PortSpecifier":{"PortValue":35660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1d477c6-f434-4e7c-815e-a55d60003560","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35660","PortSpecifier":{"PortValue":35660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854561,"nanos":263605328},"http":{"id":"b1d477c6-f434-4e7c-815e-a55d60003560","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/sub-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d477c6-f434-4e7c-815e-a55d60003560","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59374","PortSpecifier":{"PortValue":59374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59374","PortSpecifier":{"PortValue":59374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854561,"nanos":305323515},"http":{"id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/sub-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f34faa6e-1821-4eba-8cb8-5737d10d7f92","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35666","PortSpecifier":{"PortValue":35666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:35666","PortSpecifier":{"PortValue":35666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854561,"nanos":348689530},"http":{"id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","method":"GET","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uEhEeKzcWaCvHQ9p_NthR6zacfgNwS59kvHx4HX1WsVTWn8hum2Be8d8iqAp"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uEhEeKzcWaCvHQ9p_NthR6zacfgNwS59kvHx4HX1WsVTWn8hum2Be8d8iqAp\"}"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2621a15a-db6d-47be-a86f-8e8dc0140f2d","keyName":"e2e-sub-iso-efcfc4","subscription":"e2e-a-only-d2d482","tenant":"e2e-shared-a-38da25","userId":"2621a15a-db6d-47be-a86f-8e8dc0140f2d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/sub-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d2d482"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cfc9a3b-3481-43dd-9e4b-6e9daf48b25b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59384","PortSpecifier":{"PortValue":59384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59384","PortSpecifier":{"PortValue":59384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854561,"nanos":377522664},"http":{"id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","method":"GET","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JfuwIIoTrLezRFat_oNsu4J0MnACL3yLug5cnGLE2s4VM1H0f9Niu0V6wa1X"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JfuwIIoTrLezRFat_oNsu4J0MnACL3yLug5cnGLE2s4VM1H0f9Niu0V6wa1X\"}"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"77b6cb0c-dfdf-485d-aef0-5ece4d3974ee","keyName":"e2e-sub-iso-7686a8","subscription":"e2e-b-only-d2d482","tenant":"e2e-shared-b-44edfc","userId":"77b6cb0c-dfdf-485d-aef0-5ece4d3974ee","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/sub-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d2d482"}
{"level":"info","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f264f14-1a3c-4a1e-b56e-ca58ffb7a56a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45748","PortSpecifier":{"PortValue":45748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34a82fad-98e3-4fbf-8a1c-736e58010790","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45748","PortSpecifier":{"PortValue":45748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854580,"nanos":65871854},"http":{"id":"34a82fad-98e3-4fbf-8a1c-736e58010790","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/sub-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34a82fad-98e3-4fbf-8a1c-736e58010790","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58912","PortSpecifier":{"PortValue":58912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c333e7fb-f496-4734-9bd0-516916e9893d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58912","PortSpecifier":{"PortValue":58912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854580,"nanos":103628248},"http":{"id":"c333e7fb-f496-4734-9bd0-516916e9893d","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/sub-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c333e7fb-f496-4734-9bd0-516916e9893d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45762","PortSpecifier":{"PortValue":45762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:45762","PortSpecifier":{"PortValue":45762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854580,"nanos":140697596},"http":{"id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BZEfjbTIWChWcyCN_Bwp2MKmC7iGihNPO6s7Is3MZGlWu4EKWsKCsPfkExye"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BZEfjbTIWChWcyCN_Bwp2MKmC7iGihNPO6s7Is3MZGlWu4EKWsKCsPfkExye\"}"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4e50d226-1e7c-46b3-bf23-b4e2fa99239c","keyName":"e2e-sub-iso-055901","subscription":"e2e-shared-sub-844f8b","tenant":"e2e-shared-a-38da25","userId":"4e50d226-1e7c-46b3-bf23-b4e2fa99239c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/sub-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-844f8b"}
{"level":"info","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39923a43-3c4b-47ef-93f5-401c2cc2c5e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58922","PortSpecifier":{"PortValue":58922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:58922","PortSpecifier":{"PortValue":58922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854580,"nanos":170415136},"http":{"id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cXSHWHHcy0lu2UwV_MmIBtHBvTu1ftF0bpT4qH6usvcxAO43zAv4M8CrfrWg"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cXSHWHHcy0lu2UwV_MmIBtHBvTu1ftF0bpT4qH6usvcxAO43zAv4M8CrfrWg\"}"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a7b4912c-2d31-4524-b637-dc48bb7dd8a4","keyName":"e2e-sub-iso-a4f3ea","subscription":"e2e-shared-sub-844f8b","tenant":"e2e-shared-b-44edfc","userId":"a7b4912c-2d31-4524-b637-dc48bb7dd8a4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/sub-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-844f8b"}
{"level":"info","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:56:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd90b0f5-d3ba-453f-979d-4c48591abb05","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1be04975979194db1eb65af0aee451a381ecf02e65bf9988b0d8c93709c1acf"}
{"level":"info","ts":"2026-07-24T00:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a2e367c9dde7f4f8df4c292593207604c58ee731fa1350cee02c422a1f2021f9"}
{"level":"info","ts":"2026-07-24T00:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/314ea17ed4578b8a5d460231dd28171038ecce15c538857b3bbcce5fd7f9abbd"}
{"level":"info","ts":"2026-07-24T00:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:56:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8980caf36a17ec52057186a9a8c14d09bec65c99ae02fc644aded01a7bccc7d6"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1df9aaa513e498f6ad509aac6aad81fcdfad182c714e8942bbca919c4d156b9a"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f53a6b503a1206f62a1d1e95b3a399be735214c544f90416c346d819d9afa124"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/46ce81fdd4f46a14f8c80c11defc3219be4e500c5940983b09d21dc95e09bb2b"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d930a7c13be30c061c2409f99e09d85b8b358c532728d5a169ed7deada7252b2"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fab80255fdb7448e770c0b804a13bd0c037a43e5a2e6314f358494dd29e2b17"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d75b7e2f3d3ef9a8eb7aad3d046ed875a8f897aea4894c7144af5624658ed275"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fed3d8b1eed822486d000efc1ce0b8ec8cc1ec87b332df8a6bccc9558c50474"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13c9eb03a31d7e85e0dfa0672f54c404fc40e351d589dee1f8054608d8dd3789"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/264225b73c449abdd089101e8ab98b735c4b5548503ee3d283aaf56b572d65c2"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24558de5cd5e0222b5f075965bde13a718cf1f8a3c5f80b49e454119746b5c9b"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d5e23415909b18d37523b14af32273fde15774eb3dbf12241de5a51d8049f27"}
{"level":"info","ts":"2026-07-24T00:56:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1c30d7f397663ffd16bc49a33e6322e3e4f3cdebf1d483c89b23f992f64732e"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5"}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca"}
{"level":"debug","ts":"2026-07-24T00:57:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"387134b33c966eda3d277d81872812f42fa28f282a404f4301c5f218b2040cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3"}
{"level":"info","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"387134b33c966eda3d277d81872812f42fa28f282a404f4301c5f218b2040cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/387134b33c966eda3d277d81872812f42fa28f282a404f4301c5f218b2040cd7"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"387134b33c966eda3d277d81872812f42fa28f282a404f4301c5f218b2040cd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["387134b33c966eda3d277d81872812f42fa28f282a404f4301c5f218b2040cd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"387134b33c966eda3d277d81872812f42fa28f282a404f4301c5f218b2040cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"105ee4388979b1afdcf5701a8826c1b691d5cfbbacf4c9d9cf8968d8aeb87dc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"105ee4388979b1afdcf5701a8826c1b691d5cfbbacf4c9d9cf8968d8aeb87dc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45086379dc7e1da84ce69eca3c36aa1e40f0da1e7578183f9aebba77d9d208d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/105ee4388979b1afdcf5701a8826c1b691d5cfbbacf4c9d9cf8968d8aeb87dc9"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45086379dc7e1da84ce69eca3c36aa1e40f0da1e7578183f9aebba77d9d208d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"387134b33c966eda3d277d81872812f42fa28f282a404f4301c5f218b2040cd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9113bfb1297b78fd9c75e649ea62109b045b81538d99eca25feae22eb3ef663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9113bfb1297b78fd9c75e649ea62109b045b81538d99eca25feae22eb3ef663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45086379dc7e1da84ce69eca3c36aa1e40f0da1e7578183f9aebba77d9d208d6"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"105ee4388979b1afdcf5701a8826c1b691d5cfbbacf4c9d9cf8968d8aeb87dc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["105ee4388979b1afdcf5701a8826c1b691d5cfbbacf4c9d9cf8968d8aeb87dc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/387134b33c966eda3d277d81872812f42fa28f282a404f4301c5f218b2040cd7"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"105ee4388979b1afdcf5701a8826c1b691d5cfbbacf4c9d9cf8968d8aeb87dc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45086379dc7e1da84ce69eca3c36aa1e40f0da1e7578183f9aebba77d9d208d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45086379dc7e1da84ce69eca3c36aa1e40f0da1e7578183f9aebba77d9d208d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45086379dc7e1da84ce69eca3c36aa1e40f0da1e7578183f9aebba77d9d208d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbcebaf17626c9b0b398d305058b65a448a23cb144df8fe6d22461b5d851916","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9113bfb1297b78fd9c75e649ea62109b045b81538d99eca25feae22eb3ef663"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbcebaf17626c9b0b398d305058b65a448a23cb144df8fe6d22461b5d851916","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f9113bfb1297b78fd9c75e649ea62109b045b81538d99eca25feae22eb3ef663","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f9113bfb1297b78fd9c75e649ea62109b045b81538d99eca25feae22eb3ef663"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f9113bfb1297b78fd9c75e649ea62109b045b81538d99eca25feae22eb3ef663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8182179e493163dd8f0814b9840866a39a43f7176812e34cbe2326f6eab32740","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbcebaf17626c9b0b398d305058b65a448a23cb144df8fe6d22461b5d851916"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45086379dc7e1da84ce69eca3c36aa1e40f0da1e7578183f9aebba77d9d208d6"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8182179e493163dd8f0814b9840866a39a43f7176812e34cbe2326f6eab32740","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"105ee4388979b1afdcf5701a8826c1b691d5cfbbacf4c9d9cf8968d8aeb87dc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8182179e493163dd8f0814b9840866a39a43f7176812e34cbe2326f6eab32740"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/105ee4388979b1afdcf5701a8826c1b691d5cfbbacf4c9d9cf8968d8aeb87dc9"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45086379dc7e1da84ce69eca3c36aa1e40f0da1e7578183f9aebba77d9d208d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dbcebaf17626c9b0b398d305058b65a448a23cb144df8fe6d22461b5d851916","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4dbcebaf17626c9b0b398d305058b65a448a23cb144df8fe6d22461b5d851916"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9113bfb1297b78fd9c75e649ea62109b045b81538d99eca25feae22eb3ef663"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dbcebaf17626c9b0b398d305058b65a448a23cb144df8fe6d22461b5d851916","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f9113bfb1297b78fd9c75e649ea62109b045b81538d99eca25feae22eb3ef663","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dbcebaf17626c9b0b398d305058b65a448a23cb144df8fe6d22461b5d851916"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8182179e493163dd8f0814b9840866a39a43f7176812e34cbe2326f6eab32740","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:57:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8182179e493163dd8f0814b9840866a39a43f7176812e34cbe2326f6eab32740"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8182179e493163dd8f0814b9840866a39a43f7176812e34cbe2326f6eab32740","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dbcebaf17626c9b0b398d305058b65a448a23cb144df8fe6d22461b5d851916","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8182179e493163dd8f0814b9840866a39a43f7176812e34cbe2326f6eab32740","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:57:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8182179e493163dd8f0814b9840866a39a43f7176812e34cbe2326f6eab32740"}
{"level":"info","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39066","PortSpecifier":{"PortValue":39066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39066","PortSpecifier":{"PortValue":39066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854656,"nanos":180640447},"http":{"id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e198f2d0-514a-4a5c-99f1-c61d55afcb57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42978","PortSpecifier":{"PortValue":42978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42978","PortSpecifier":{"PortValue":42978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854656,"nanos":222680889},"http":{"id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/rate-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aaa1f7c0-d507-4f43-9ae5-656c92deae86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39076","PortSpecifier":{"PortValue":39076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39076","PortSpecifier":{"PortValue":39076}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854656,"nanos":263919257},"http":{"id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx\"}"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","subscription":"e2e-rate-iso-a-2d1c5e","tenant":"e2e-shared-a-38da25","userId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-2d1c5e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2d1c5e"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","selected_subscription":"e2e-rate-iso-a-2d1c5e","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-2d1c5e@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"769f6f0a-e1f2-403e-aff1-a5b193ac9a37","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39092","PortSpecifier":{"PortValue":39092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65b0127b-5614-4191-a2af-f3e659fa6c02","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39092","PortSpecifier":{"PortValue":39092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854657,"nanos":356149954},"http":{"id":"65b0127b-5614-4191-a2af-f3e659fa6c02","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx"}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx\"}"}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","subscription":"e2e-rate-iso-a-2d1c5e","tenant":"e2e-shared-a-38da25","userId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-2d1c5e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2d1c5e"}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","selected_subscription":"e2e-rate-iso-a-2d1c5e","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-2d1c5e@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65b0127b-5614-4191-a2af-f3e659fa6c02","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d076b36-91d6-4831-950d-fcf78487090b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39106","PortSpecifier":{"PortValue":39106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d076b36-91d6-4831-950d-fcf78487090b","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d076b36-91d6-4831-950d-fcf78487090b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39106","PortSpecifier":{"PortValue":39106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854658,"nanos":398446276},"http":{"id":"7d076b36-91d6-4831-950d-fcf78487090b","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx"}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx\"}"}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","subscription":"e2e-rate-iso-a-2d1c5e","tenant":"e2e-shared-a-38da25","userId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-2d1c5e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d076b36-91d6-4831-950d-fcf78487090b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2d1c5e"}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d076b36-91d6-4831-950d-fcf78487090b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","selected_subscription":"e2e-rate-iso-a-2d1c5e","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-2d1c5e@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d076b36-91d6-4831-950d-fcf78487090b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d076b36-91d6-4831-950d-fcf78487090b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39112","PortSpecifier":{"PortValue":39112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb642e15-e977-40d1-b046-e83312e7b2b1","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39112","PortSpecifier":{"PortValue":39112}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854659,"nanos":438394615},"http":{"id":"cb642e15-e977-40d1-b046-e83312e7b2b1","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx"}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx\"}"}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","subscription":"e2e-rate-iso-a-2d1c5e","tenant":"e2e-shared-a-38da25","userId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-2d1c5e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2d1c5e"}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","selected_subscription":"e2e-rate-iso-a-2d1c5e","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-2d1c5e@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb642e15-e977-40d1-b046-e83312e7b2b1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39128","PortSpecifier":{"PortValue":39128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39128","PortSpecifier":{"PortValue":39128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854660,"nanos":477695377},"http":{"id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx"}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx\"}"}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","subscription":"e2e-rate-iso-a-2d1c5e","tenant":"e2e-shared-a-38da25","userId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-2d1c5e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2d1c5e"}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","selected_subscription":"e2e-rate-iso-a-2d1c5e","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-2d1c5e@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e1a93cd-ee07-478d-aa1c-90a7503fb58c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39142","PortSpecifier":{"PortValue":39142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39142","PortSpecifier":{"PortValue":39142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854661,"nanos":525826478},"http":{"id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx"}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx\"}"}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","subscription":"e2e-rate-iso-a-2d1c5e","tenant":"e2e-shared-a-38da25","userId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-2d1c5e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2d1c5e"}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","selected_subscription":"e2e-rate-iso-a-2d1c5e","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-2d1c5e@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b4bf36-ecd6-481a-8c95-01a95fbb5848","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39156","PortSpecifier":{"PortValue":39156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39156","PortSpecifier":{"PortValue":39156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854662,"nanos":565872807},"http":{"id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1G0Os0hgqhIgscNVu_CWyYMWL2mYPIxWUYnilQhP8UU9KLzmUqGt9wqVoBMFx\"}"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","subscription":"e2e-rate-iso-a-2d1c5e","tenant":"e2e-shared-a-38da25","userId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-2d1c5e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-2d1c5e"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dd4f1042-f48a-44a9-877c-a16e0ea41254","keyName":"e2e-rate-a-2d1c5e","selected_subscription":"e2e-rate-iso-a-2d1c5e","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-2d1c5e@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-2d1c5e","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2b02a3f-982d-4be9-88b4-15b94e6c4e64","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42436","PortSpecifier":{"PortValue":42436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42436","PortSpecifier":{"PortValue":42436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854671,"nanos":320367435},"http":{"id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eac5b45-4f15-4bd1-8d20-0d7d9334f721","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3961619-aa6d-47f7-a525-759d83df4103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36388","PortSpecifier":{"PortValue":36388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3961619-aa6d-47f7-a525-759d83df4103","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3961619-aa6d-47f7-a525-759d83df4103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:36388","PortSpecifier":{"PortValue":36388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854671,"nanos":358534482},"http":{"id":"f3961619-aa6d-47f7-a525-759d83df4103","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3961619-aa6d-47f7-a525-759d83df4103","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3961619-aa6d-47f7-a525-759d83df4103","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3961619-aa6d-47f7-a525-759d83df4103","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3961619-aa6d-47f7-a525-759d83df4103","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3961619-aa6d-47f7-a525-759d83df4103","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3961619-aa6d-47f7-a525-759d83df4103","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/rate-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3961619-aa6d-47f7-a525-759d83df4103","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3961619-aa6d-47f7-a525-759d83df4103","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3961619-aa6d-47f7-a525-759d83df4103","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3961619-aa6d-47f7-a525-759d83df4103","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3961619-aa6d-47f7-a525-759d83df4103","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42442","PortSpecifier":{"PortValue":42442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42442","PortSpecifier":{"PortValue":42442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854671,"nanos":393726802},"http":{"id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xNdLw6K3OgPzbNfT_B216v0SFEIcoleYwdRWnJPKVcubeCyDXBQeEOPfV1Do"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xNdLw6K3OgPzbNfT_B216v0SFEIcoleYwdRWnJPKVcubeCyDXBQeEOPfV1Do\"}"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fc7d229-e8a0-4929-bed3-42c4ee88a6e2","keyName":"e2e-rate-a-4fddb3","subscription":"e2e-rate-iso-a-4fddb3","tenant":"e2e-shared-a-38da25","userId":"5fc7d229-e8a0-4929-bed3-42c4ee88a6e2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-4fddb3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fddb3","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4fddb3"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fc7d229-e8a0-4929-bed3-42c4ee88a6e2","keyName":"e2e-rate-a-4fddb3","selected_subscription":"e2e-rate-iso-a-4fddb3","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-4fddb3@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fddb3","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15dfac3c-4f99-42f2-9fc5-2e3f4f23dbff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42456","PortSpecifier":{"PortValue":42456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71184a84-6be2-48be-829c-44430bb0f4cc","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:42456","PortSpecifier":{"PortValue":42456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854672,"nanos":432510915},"http":{"id":"71184a84-6be2-48be-829c-44430bb0f4cc","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xNdLw6K3OgPzbNfT_B216v0SFEIcoleYwdRWnJPKVcubeCyDXBQeEOPfV1Do"}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xNdLw6K3OgPzbNfT_B216v0SFEIcoleYwdRWnJPKVcubeCyDXBQeEOPfV1Do\"}"}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fc7d229-e8a0-4929-bed3-42c4ee88a6e2","keyName":"e2e-rate-a-4fddb3","subscription":"e2e-rate-iso-a-4fddb3","tenant":"e2e-shared-a-38da25","userId":"5fc7d229-e8a0-4929-bed3-42c4ee88a6e2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-4fddb3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fddb3","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4fddb3"}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fc7d229-e8a0-4929-bed3-42c4ee88a6e2","keyName":"e2e-rate-a-4fddb3","selected_subscription":"e2e-rate-iso-a-4fddb3","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-4fddb3@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fddb3","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71184a84-6be2-48be-829c-44430bb0f4cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39896","PortSpecifier":{"PortValue":39896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","method":"POST","path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions","host":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:39896","PortSpecifier":{"PortValue":39896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854673,"nanos":472641321},"http":{"id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","method":"POST","headers":{":authority":"e2e-shared-a-38da25.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xNdLw6K3OgPzbNfT_B216v0SFEIcoleYwdRWnJPKVcubeCyDXBQeEOPfV1Do"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xNdLw6K3OgPzbNfT_B216v0SFEIcoleYwdRWnJPKVcubeCyDXBQeEOPfV1Do\"}"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5fc7d229-e8a0-4929-bed3-42c4ee88a6e2","keyName":"e2e-rate-a-4fddb3","subscription":"e2e-rate-iso-a-4fddb3","tenant":"e2e-shared-a-38da25","userId":"5fc7d229-e8a0-4929-bed3-42c4ee88a6e2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\",\"requestedSubscription\":\"e2e-rate-iso-a-4fddb3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-38da25.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fddb3","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-38da25/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4fddb3"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5fc7d229-e8a0-4929-bed3-42c4ee88a6e2","keyName":"e2e-rate-a-4fddb3","selected_subscription":"e2e-rate-iso-a-4fddb3","selected_subscription_key":"ai-tenant-e2e-shared-a-38da25/e2e-rate-iso-a-4fddb3@ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-38da25","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4fddb3","namespace":"ai-tenant-e2e-shared-a-38da25","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-38da25/rate-test-model-38da25"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"417ad70f-420c-47ee-9ae9-ae65121d2de7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59548","PortSpecifier":{"PortValue":59548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e66f6cc-7c32-4181-b602-4419f9661496","method":"POST","path":"/ai-tenant-e2e-shared-b-44edfc/rate-test-model-44edfc/v1/completions","host":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:59548","PortSpecifier":{"PortValue":59548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854673,"nanos":508478392},"http":{"id":"8e66f6cc-7c32-4181-b602-4419f9661496","method":"POST","headers":{":authority":"e2e-shared-b-44edfc.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-44edfc/rate-test-model-44edfc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JenT7fXKwsiPqoek_ZQuaBs4P0VpsYzeQsl9XbAxrsV3zcIlM7CvFTzVH1I"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JenT7fXKwsiPqoek_ZQuaBs4P0VpsYzeQsl9XbAxrsV3zcIlM7CvFTzVH1I\"}"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"646032de-3ed7-45af-b601-81ea74695bcd","keyName":"e2e-rate-b-4fddb3","subscription":"e2e-rate-iso-b-4fddb3","tenant":"e2e-shared-b-44edfc","userId":"646032de-3ed7-45af-b601-81ea74695bcd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-44edfc/rate-test-model-44edfc\",\"requestedSubscription\":\"e2e-rate-iso-b-4fddb3\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-44edfc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-44edfc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4fddb3","namespace":"ai-tenant-e2e-shared-b-44edfc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-44edfc/rate-test-model-44edfc"}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-44edfc/rate-test-model-44edfc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-44edfc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-4fddb3"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"646032de-3ed7-45af-b601-81ea74695bcd","keyName":"e2e-rate-b-4fddb3","selected_subscription":"e2e-rate-iso-b-4fddb3","selected_subscription_key":"ai-tenant-e2e-shared-b-44edfc/e2e-rate-iso-b-4fddb3@ai-tenant-e2e-shared-b-44edfc/rate-test-model-44edfc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-44edfc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-4fddb3","namespace":"ai-tenant-e2e-shared-b-44edfc","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-44edfc/rate-test-model-44edfc"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:57:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e66f6cc-7c32-4181-b602-4419f9661496","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45086379dc7e1da84ce69eca3c36aa1e40f0da1e7578183f9aebba77d9d208d6"}
{"level":"info","ts":"2026-07-24T00:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c16297dd278718944a34aac273dd9179ec964057bab73fde34c334e69453431e"}
{"level":"info","ts":"2026-07-24T00:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/387134b33c966eda3d277d81872812f42fa28f282a404f4301c5f218b2040cd7"}
{"level":"info","ts":"2026-07-24T00:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e0dae33b70923000a3c832b857869263ef9bad39542f88a103e8e0d89b4dad9"}
{"level":"info","ts":"2026-07-24T00:57:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04e2de1d4179885003c90c6f6ce1061f24733e5b181abdad44cb0e9065babcb7"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02c2ac0bce9be51aee25a7459d11df90b6dcba2da842ee0683231a61392bc5b8"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be8b07af7051089540a323a1a1bd45e3e46787a88db6cfc9628e42a5812778e3"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a2e34c5e02590e3c0b268545a38913a3b58abbbe6a03164326e70c2cbd16fa"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02b9ed60fd45cd8306a8ffee8867fd5319a6116f8af363d5b41014b36e49b15c"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a46df1bfaec2fb33aed078d0fc163ea66eb8c1b108e9b4a73574562e40341c6"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f22ab4daec54892548669e309d0138486c70fe3fb5e5734efbe20e6e9f14759"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0e954ae611450add72e62b0e6d3a75d6dd9f5715511722d2606e8606aa8ae57"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/105ee4388979b1afdcf5701a8826c1b691d5cfbbacf4c9d9cf8968d8aeb87dc9"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bec7b6d5a99d8961a75ce64292717531c77e65f8ae631608a346eb22f3eaa8d5"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a9fd81d9f4e05dc02c22b729bad48493bfd8a980cc5563b5bc69ca6458ee02e"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7decb2aa3a66e37c9da067fdd2885aa25712ea5cad6ba1c6ef73bfec99f9fb4f"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9113bfb1297b78fd9c75e649ea62109b045b81538d99eca25feae22eb3ef663"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8182179e493163dd8f0814b9840866a39a43f7176812e34cbe2326f6eab32740"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2bb52d7fcf3ebd38588bd4d5c009f23fc6fbb4a2f91066c76d70a81b4aa8de7c"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90daf5aab77c5abec66e7fb127ab39d42a0bd977f8cc57e7d4487539635461ca"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31d845d67309c1e120de70a5e325f9a7b325333eac1adcdb46ac2101ff35c706"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79021dc7bedbfde85a12487f6774a3b21ed15ec0a734275f85ed3d373458d18f"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4dbcebaf17626c9b0b398d305058b65a448a23cb144df8fe6d22461b5d851916"}
{"level":"info","ts":"2026-07-24T00:57:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b556a7ef37fb561d2187211734de649c016bf544e203dbe08c52250234545eaa"}
{"level":"info","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71890bfd-db7e-48be-984e-44af0470fcec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41510","PortSpecifier":{"PortValue":41510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71890bfd-db7e-48be-984e-44af0470fcec","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71890bfd-db7e-48be-984e-44af0470fcec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41510","PortSpecifier":{"PortValue":41510}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854747,"nanos":202232806},"http":{"id":"71890bfd-db7e-48be-984e-44af0470fcec","method":"POST","headers":{":authority":"maas.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71890bfd-db7e-48be-984e-44af0470fcec","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71890bfd-db7e-48be-984e-44af0470fcec","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71890bfd-db7e-48be-984e-44af0470fcec","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71890bfd-db7e-48be-984e-44af0470fcec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71890bfd-db7e-48be-984e-44af0470fcec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71890bfd-db7e-48be-984e-44af0470fcec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71890bfd-db7e-48be-984e-44af0470fcec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71890bfd-db7e-48be-984e-44af0470fcec","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71890bfd-db7e-48be-984e-44af0470fcec","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71890bfd-db7e-48be-984e-44af0470fcec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71890bfd-db7e-48be-984e-44af0470fcec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:41514","PortSpecifier":{"PortValue":41514}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.41:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854747,"nanos":261345312},"http":{"id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","method":"POST","headers":{":authority":"maas.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mnJ1mtCqB87Ui9qS_HjgpdIDKpmCuGl9svABh67XZasqcxkJheHRi4cDYJ29"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mnJ1mtCqB87Ui9qS_HjgpdIDKpmCuGl9svABh67XZasqcxkJheHRi4cDYJ29\"}"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ac51443e-daab-4d05-99eb-a537e58f0ed6","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"ac51443e-daab-4d05-99eb-a537e58f0ed6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.41:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ac51443e-daab-4d05-99eb-a537e58f0ed6","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:59:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9111e977-3995-4d60-b8c5-c26b5db9f4ea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa"}
{"level":"debug","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d"}
{"level":"error","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f287c334994a96bb636cfe8789ccf29bd6cafe64c531871b4cbaed3ca850c14f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f287c334994a96bb636cfe8789ccf29bd6cafe64c531871b4cbaed3ca850c14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f287c334994a96bb636cfe8789ccf29bd6cafe64c531871b4cbaed3ca850c14f"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f287c334994a96bb636cfe8789ccf29bd6cafe64c531871b4cbaed3ca850c14f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f287c334994a96bb636cfe8789ccf29bd6cafe64c531871b4cbaed3ca850c14f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f287c334994a96bb636cfe8789ccf29bd6cafe64c531871b4cbaed3ca850c14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f287c334994a96bb636cfe8789ccf29bd6cafe64c531871b4cbaed3ca850c14f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f287c334994a96bb636cfe8789ccf29bd6cafe64c531871b4cbaed3ca850c14f"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3429122a612a05175edfd8157117e7f5e753560d8497fdf818b4d85e0c1e027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3429122a612a05175edfd8157117e7f5e753560d8497fdf818b4d85e0c1e027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3429122a612a05175edfd8157117e7f5e753560d8497fdf818b4d85e0c1e027"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3429122a612a05175edfd8157117e7f5e753560d8497fdf818b4d85e0c1e027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3429122a612a05175edfd8157117e7f5e753560d8497fdf818b4d85e0c1e027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3429122a612a05175edfd8157117e7f5e753560d8497fdf818b4d85e0c1e027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3429122a612a05175edfd8157117e7f5e753560d8497fdf818b4d85e0c1e027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3429122a612a05175edfd8157117e7f5e753560d8497fdf818b4d85e0c1e027"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21"}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T00:59:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21"}
{"level":"info","ts":"2026-07-24T00:59:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9"}
{"level":"info","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38326","PortSpecifier":{"PortValue":38326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-a3cf0e.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38326","PortSpecifier":{"PortValue":38326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854800,"nanos":344274731},"http":{"id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","method":"POST","headers":{":authority":"e2e-ipp-a-a3cf0e.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"]}}
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/991d7235bd49"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fc707eb4-0a4a-4f24-aaba-02ba27004cae"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"001ff030-ee9f-4e4a-8c3f-81e970dac168","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-a3cf0e.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-a3cf0e/ipp-route-a3cf0e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-a3cf0e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T01:00:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d595aa9-7558-4bc0-86bb-36df599e1f1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38340","PortSpecifier":{"PortValue":38340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","method":"POST","path":"/ai-tenant-e2e-ipp-a-a3cf0e/ipp-route-a3cf0e/v1/chat/completions","host":"e2e-ipp-a-a3cf0e.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.10:38340","PortSpecifier":{"PortValue":38340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784854802,"nanos":426877470},"http":{"id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","method":"POST","headers":{":authority":"e2e-ipp-a-a3cf0e.apps.08e98f4e-5bc6-4a15-8c99-991d7235bd49.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-a3cf0e/ipp-route-a3cf0e/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YZTvkOH1haxCDR9l_DId6lMRvn5DQwRevHxVPQA81GXD0NAWTun1CCTwxfVI"}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-a3cf0e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YZTvkOH1haxCDR9l_DId6lMRvn5DQwRevHxVPQA81GXD0NAWTun1CCTwxfVI\"}"}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-a3cf0e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"41153245-1309-4b6a-8d06-0c686e8bc9c7","keyName":"e2e-ipp-a3cf0e","subscription":"ipp-route-a3cf0e-sub","tenant":"e2e-ipp-a-a3cf0e","userId":"41153245-1309-4b6a-8d06-0c686e8bc9c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-a3cf0e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-a3cf0e/ipp-route-a3cf0e\",\"requestedSubscription\":\"ipp-route-a3cf0e-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-a3cf0e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-a3cf0e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-a3cf0e-sub","namespace":"ai-tenant-e2e-ipp-a-a3cf0e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-a3cf0e/ipp-route-a3cf0e"}}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-a3cf0e/ipp-route-a3cf0e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-a3cf0e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-a3cf0e-sub"}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"41153245-1309-4b6a-8d06-0c686e8bc9c7","keyName":"e2e-ipp-a3cf0e","selected_subscription":"ipp-route-a3cf0e-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-a3cf0e/ipp-route-a3cf0e-sub@ai-tenant-e2e-ipp-a-a3cf0e/ipp-route-a3cf0e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-a3cf0e","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-a3cf0e-sub","namespace":"ai-tenant-e2e-ipp-a-a3cf0e","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-a3cf0e/ipp-route-a3cf0e"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-24T01:00:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f456c51-2512-47cc-85cd-d0409ba73d1c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40901c03c9dfa982e18fdab2bfa8c64d1bda5ffea180bcb1d04f77006e5715e7"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b80b9f34269b2c2d86285625b7c9a4d9835d9c4bccd0d318f58c3a2f3c14a50d"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90913ec327bd9d2c25c601917b9335480820e3638cc134ccf41ba401931dbfaa"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c1bf7978bc463d7759ccbfc26cdef69bf2362e038492bab0010fe43e442306d"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d7860a764a60859f863f336a074ccbe70976720255de97d370a631b05830e66"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec1775b4386fa8c704b612984f68d1858bc6c372edbe0b6ac95dddb9d536ec32"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d04d1b3e5a872211f56f568eecdd2484ed0e93e4e199ebc79605403bda60fd21"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/180e92a4f72a25e019a957c3b02bd88c904cf72ac79b8adf8ab3f3c7756a7fc9"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f287c334994a96bb636cfe8789ccf29bd6cafe64c531871b4cbaed3ca850c14f"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/deff17dad2ae36bd0cc0f19d8a8a152a97eea766cf29f1ca7f986b28fc7e4b5a"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3429122a612a05175edfd8157117e7f5e753560d8497fdf818b4d85e0c1e027"}
{"level":"info","ts":"2026-07-24T01:01:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84ddf98592ec7491d4cfd22b8b983a800fa671b6fe7d7e7ac5da9925b6cf9367"}