--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f"}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f"}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f"}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f"}
{"level":"info","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:35:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f"}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:35:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:35:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:35:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:35:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:35:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"info","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43572","PortSpecifier":{"PortValue":43572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43572","PortSpecifier":{"PortValue":43572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057723,"nanos":706396168},"http":{"id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63dc9936-c4a4-48ac-a441-eaaf6d613a8c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56066","PortSpecifier":{"PortValue":56066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c4df3b54-80cc-483d-bc45-fcec2203179f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56066","PortSpecifier":{"PortValue":56066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057723,"nanos":784505752},"http":{"id":"c4df3b54-80cc-483d-bc45-fcec2203179f","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/auth-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c4df3b54-80cc-483d-bc45-fcec2203179f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43578","PortSpecifier":{"PortValue":43578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","method":"GET","path":"/maas-api/v1/api-keys/84e3f305-d4b8-47b5-98e3-156842533fc3","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43578","PortSpecifier":{"PortValue":43578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057723,"nanos":843527429},"http":{"id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","method":"GET","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/84e3f305-d4b8-47b5-98e3-156842533fc3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/84e3f305-d4b8-47b5-98e3-156842533fc3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ca704e-7be7-46a3-9b3e-bea39293f60a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56068","PortSpecifier":{"PortValue":56068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","method":"GET","path":"/maas-api/v1/api-keys/c95a32c7-1780-46f5-87a1-5c42a1b2c554","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56068","PortSpecifier":{"PortValue":56068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057723,"nanos":882252032},"http":{"id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","method":"GET","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c95a32c7-1780-46f5-87a1-5c42a1b2c554",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c95a32c7-1780-46f5-87a1-5c42a1b2c554",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/auth-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:35:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a79e5033-01e5-41f6-96c9-ded5d0e80a82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56114","PortSpecifier":{"PortValue":56114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56114","PortSpecifier":{"PortValue":56114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057741,"nanos":39254989},"http":{"id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b1e853-9edb-44f2-b7d0-b6787daadf85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37028","PortSpecifier":{"PortValue":37028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:37028","PortSpecifier":{"PortValue":37028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057741,"nanos":83199272},"http":{"id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/auth-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed89b297-fee3-40f1-8b8a-538078fe70a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be844228-2f72-44ba-8a8b-74686840230e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56128","PortSpecifier":{"PortValue":56128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be844228-2f72-44ba-8a8b-74686840230e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be844228-2f72-44ba-8a8b-74686840230e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56128","PortSpecifier":{"PortValue":56128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057741,"nanos":121251654},"http":{"id":"be844228-2f72-44ba-8a8b-74686840230e","method":"GET","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-42pHPeT4dGzvEnDa_BUXX30LiY5FkHfq2PBUbeNUXttc5gA7srvmxn4pdm1M"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-42pHPeT4dGzvEnDa_BUXX30LiY5FkHfq2PBUbeNUXttc5gA7srvmxn4pdm1M\"}"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"119921fd-9d51-4f17-8a86-5cec2ad07e4f","keyName":"e2e-auth-iso-a-16f1f7","subscription":"e2e-auth-iso-49d4a8","tenant":"e2e-shared-a-755a0b","userId":"119921fd-9d51-4f17-8a86-5cec2ad07e4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be844228-2f72-44ba-8a8b-74686840230e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-49d4a8"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be844228-2f72-44ba-8a8b-74686840230e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be844228-2f72-44ba-8a8b-74686840230e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:35:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be844228-2f72-44ba-8a8b-74686840230e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39310","PortSpecifier":{"PortValue":39310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:39310","PortSpecifier":{"PortValue":39310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057758,"nanos":256876658},"http":{"id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b3c73f8-33d8-4aa6-b387-53fcca43eead","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38636","PortSpecifier":{"PortValue":38636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38636","PortSpecifier":{"PortValue":38636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057758,"nanos":294968893},"http":{"id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/auth-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9315cbd7-298f-4e38-b5f6-f76013a9d869","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38638","PortSpecifier":{"PortValue":38638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17d87bb9-6f03-4e67-a338-349c82f6629a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38638","PortSpecifier":{"PortValue":38638}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057758,"nanos":333712043},"http":{"id":"17d87bb9-6f03-4e67-a338-349c82f6629a","method":"GET","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Z4nKhhzJBoF19Dxs_4frmPuN3Aa2QS1bXKTa2o4kRN8JHOcQqabpnFmlMBw2"}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Z4nKhhzJBoF19Dxs_4frmPuN3Aa2QS1bXKTa2o4kRN8JHOcQqabpnFmlMBw2\"}"}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T19:35:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17d87bb9-6f03-4e67-a338-349c82f6629a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35026","PortSpecifier":{"PortValue":35026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35026","PortSpecifier":{"PortValue":35026}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057775,"nanos":466792014},"http":{"id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3546dfd4-70b2-4a2b-986d-b2050b1d1e36","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56826","PortSpecifier":{"PortValue":56826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5b08013-047c-44f9-bd0f-76664a71e19c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56826","PortSpecifier":{"PortValue":56826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057775,"nanos":502740023},"http":{"id":"f5b08013-047c-44f9-bd0f-76664a71e19c","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/auth-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b08013-047c-44f9-bd0f-76664a71e19c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"349da776-7ebb-4910-80e1-decc06fb2873","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35038","PortSpecifier":{"PortValue":35038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"349da776-7ebb-4910-80e1-decc06fb2873","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"349da776-7ebb-4910-80e1-decc06fb2873","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:35038","PortSpecifier":{"PortValue":35038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057775,"nanos":538074446},"http":{"id":"349da776-7ebb-4910-80e1-decc06fb2873","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"349da776-7ebb-4910-80e1-decc06fb2873","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"349da776-7ebb-4910-80e1-decc06fb2873","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"349da776-7ebb-4910-80e1-decc06fb2873","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349da776-7ebb-4910-80e1-decc06fb2873","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349da776-7ebb-4910-80e1-decc06fb2873","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"349da776-7ebb-4910-80e1-decc06fb2873","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"349da776-7ebb-4910-80e1-decc06fb2873","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349da776-7ebb-4910-80e1-decc06fb2873","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"349da776-7ebb-4910-80e1-decc06fb2873","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"349da776-7ebb-4910-80e1-decc06fb2873","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"349da776-7ebb-4910-80e1-decc06fb2873","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56828","PortSpecifier":{"PortValue":56828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56828","PortSpecifier":{"PortValue":56828}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057775,"nanos":572408800},"http":{"id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/auth-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d7e3ed1-a71d-439e-a064-e501aadaaeb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43446","PortSpecifier":{"PortValue":43446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43446","PortSpecifier":{"PortValue":43446}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057792,"nanos":743612476},"http":{"id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0ff7d9d-9633-416b-9e51-dd19e42cad50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55992","PortSpecifier":{"PortValue":55992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f035dbc-4a91-418c-9dba-074c0639f321","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55992","PortSpecifier":{"PortValue":55992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057792,"nanos":779056609},"http":{"id":"0f035dbc-4a91-418c-9dba-074c0639f321","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/auth-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f035dbc-4a91-418c-9dba-074c0639f321","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56004","PortSpecifier":{"PortValue":56004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","method":"GET","path":"/maas-api/v1/api-keys/d3f8afad-1d90-4ba9-8052-1587d68a2445","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56004","PortSpecifier":{"PortValue":56004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057792,"nanos":814326511},"http":{"id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","method":"GET","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d3f8afad-1d90-4ba9-8052-1587d68a2445",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d3f8afad-1d90-4ba9-8052-1587d68a2445",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/auth-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a8dc6af-3c61-49fb-b1fb-e8e4d9933cbd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43456","PortSpecifier":{"PortValue":43456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43c4ee63-03b8-4331-a516-491f176fa1a6","method":"GET","path":"/maas-api/v1/api-keys/d3f8afad-1d90-4ba9-8052-1587d68a2445","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43456","PortSpecifier":{"PortValue":43456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057792,"nanos":848046501},"http":{"id":"43c4ee63-03b8-4331-a516-491f176fa1a6","method":"GET","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d3f8afad-1d90-4ba9-8052-1587d68a2445",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d3f8afad-1d90-4ba9-8052-1587d68a2445",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43c4ee63-03b8-4331-a516-491f176fa1a6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50478","PortSpecifier":{"PortValue":50478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50478","PortSpecifier":{"PortValue":50478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057810,"nanos":107559258},"http":{"id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdf77161-0d1c-4152-8163-dd2ebfabe499","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49686","PortSpecifier":{"PortValue":49686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49686","PortSpecifier":{"PortValue":49686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057810,"nanos":145838090},"http":{"id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/auth-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d157c368-9a9a-4596-bf64-34fd5a8b44af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50486","PortSpecifier":{"PortValue":50486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50486","PortSpecifier":{"PortValue":50486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057810,"nanos":182015666},"http":{"id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-See5Gj738vFfKsSF_jdRCvbqdBLDrWECF6eMdiJsEJo50TJ8QDFNcl1OMGM4"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-See5Gj738vFfKsSF_jdRCvbqdBLDrWECF6eMdiJsEJo50TJ8QDFNcl1OMGM4\"}"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"53540295-1240-4f64-af74-78abf20bcb20","keyName":"e2e-auth-iso-a-6f56f5","subscription":"e2e-auth-iso-6c231f","tenant":"e2e-shared-a-755a0b","userId":"53540295-1240-4f64-af74-78abf20bcb20","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/auth-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6c231f"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:36:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79f5c900-49ff-4a5a-a22d-baf45ebdf5cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:36:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec8eb9eb7ba35a43f8f8eae61d5dce1df12d3a88e98f1642356a0d7d8a26a3b1"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6d5c64d97b62bfe10d7a08100daa3ef0229ca287573d7abc0cd1fe1f95ad923"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/466ec5ebc10fbd6e34fccfee581c603fcce5760880be208564d304602db2d89e"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4b9964e7568550fffaecfc762d84d2356e712d550f1fd4978fdd05f9c918bb8"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2a46467ee07b11510a0b099cb61a6ebd312c76416c702b26ec05e184e825637"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39b387d015c1a29a65ffbe8f59b415ea25467a56a97729717eae563b68a700cf"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/037980701c5c4e2d951b472cc7889078a4657aa6272ff52d1468ab43e87b9842"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cddc09f56026b0c1d024282fd1efb1db03f5207517ac664236085739ec1b2fa"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9b5eabb10f8906ed6e346ec6db543e36a3e5f8a7bc9c889fb7ec12b1b1ab072b"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/931bbd5085582695a650d5fbd47b2f3ae1c7c5c7f0fdd9906c2c24bc2953eb5f"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bbbaefc1e3c401bfbfb885b86b74b062122b744a22ce18ca9b01675d03030a1f"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc536f6ec0e97b61da6783bf1711e423ab3fb7e50cce64aa30d5922527764bf6"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71721c814dc8acfd01e78145464b4def48f23a4ebc34bf23fdc7c154ac0547d7"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5363f8c7115303a6d2fd4d579841980254ec84ee0fc69d8a9d690ffc10f790c0"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/307e9d0c1c692695b81b12cf29109f6b46c6f6d0a12c87408ec20c50a10c1c62"}
{"level":"info","ts":"2026-07-14T19:36:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cf10e4f2035a49b0608cb2cd35722a12321e3a1e6729b034eb804d66ee4b518"}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"error","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"info","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"debug","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168cb01fa38a187ff657930139cf7391246079e072eeb26ac760cc52239daac7"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"168cb01fa38a187ff657930139cf7391246079e072eeb26ac760cc52239daac7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["168cb01fa38a187ff657930139cf7391246079e072eeb26ac760cc52239daac7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"168cb01fa38a187ff657930139cf7391246079e072eeb26ac760cc52239daac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168cb01fa38a187ff657930139cf7391246079e072eeb26ac760cc52239daac7"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168cb01fa38a187ff657930139cf7391246079e072eeb26ac760cc52239daac7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"error","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:37:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"error","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:37:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"info","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:38:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ea503b21d77204ca26dcfa564d9255851a8a361b467bdf61549710187e92ed3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"168cb01fa38a187ff657930139cf7391246079e072eeb26ac760cc52239daac7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bd64db4d2aa90facbb9ef4dec66792209fe130c68b6f458dd517a988ce4ee31","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"debug","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea503b21d77204ca26dcfa564d9255851a8a361b467bdf61549710187e92ed3"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/168cb01fa38a187ff657930139cf7391246079e072eeb26ac760cc52239daac7"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd64db4d2aa90facbb9ef4dec66792209fe130c68b6f458dd517a988ce4ee31"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610"}
{"level":"info","ts":"2026-07-14T19:38:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26"}
{"level":"info","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52260","PortSpecifier":{"PortValue":52260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"031fe2d8-653c-49a7-b64b-a40d08301137","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52260","PortSpecifier":{"PortValue":52260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057894,"nanos":135878373},"http":{"id":"031fe2d8-653c-49a7-b64b-a40d08301137","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/sub-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"031fe2d8-653c-49a7-b64b-a40d08301137","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53416","PortSpecifier":{"PortValue":53416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53416","PortSpecifier":{"PortValue":53416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057894,"nanos":183337040},"http":{"id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/sub-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44c2a9d8-1aba-4377-98b0-30fa4fbf8c7c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52262","PortSpecifier":{"PortValue":52262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52262","PortSpecifier":{"PortValue":52262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057894,"nanos":229377260},"http":{"id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","method":"GET","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1TF45XzshPwawE47h_xvfsGK7462MPd5QS0VlAvWSPDXrUU2rrQXBoyvTlMvu"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1TF45XzshPwawE47h_xvfsGK7462MPd5QS0VlAvWSPDXrUU2rrQXBoyvTlMvu\"}"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64f77873-f8de-4812-8dd9-4d8a4000116e","keyName":"e2e-sub-iso-b72944","subscription":"e2e-a-only-9f4d42","tenant":"e2e-shared-a-755a0b","userId":"64f77873-f8de-4812-8dd9-4d8a4000116e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/sub-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-9f4d42"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cae8018a-060e-4b6e-aa88-0f3b0a5bb783","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53426","PortSpecifier":{"PortValue":53426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:53426","PortSpecifier":{"PortValue":53426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057894,"nanos":276033140},"http":{"id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","method":"GET","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AIcwBOHO0uQTGJcc_jOu4YwvIZEFSp16E4Skd0xwYrJqom1eZJtCRU3N7ox3"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AIcwBOHO0uQTGJcc_jOu4YwvIZEFSp16E4Skd0xwYrJqom1eZJtCRU3N7ox3\"}"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bc05ab29-308f-41e6-a732-008b59093b03","keyName":"e2e-sub-iso-45bf66","subscription":"e2e-b-only-9f4d42","tenant":"e2e-shared-b-7c2fbe","userId":"bc05ab29-308f-41e6-a732-008b59093b03","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/sub-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-9f4d42"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:38:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cd7eebf2-7dfb-44fa-9a7c-3d0f51e7b210","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47242","PortSpecifier":{"PortValue":47242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47242","PortSpecifier":{"PortValue":47242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057913,"nanos":4370451},"http":{"id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/sub-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ca9b2cb-38e6-42fa-b132-4a7d2aaeb042","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60248","PortSpecifier":{"PortValue":60248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7515e262-498d-48bc-8df3-5867bbb3f68b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60248","PortSpecifier":{"PortValue":60248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057913,"nanos":40297625},"http":{"id":"7515e262-498d-48bc-8df3-5867bbb3f68b","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/sub-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7515e262-498d-48bc-8df3-5867bbb3f68b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47252","PortSpecifier":{"PortValue":47252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2ae83ff-2807-4354-9b31-8559e0269c96","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:47252","PortSpecifier":{"PortValue":47252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057913,"nanos":83754188},"http":{"id":"e2ae83ff-2807-4354-9b31-8559e0269c96","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O3a23go4DT4hsB1z_9f6YD0LtMOWbOzMhOnGtlyQkZ0OlpUoukDIMsqv9L7O"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O3a23go4DT4hsB1z_9f6YD0LtMOWbOzMhOnGtlyQkZ0OlpUoukDIMsqv9L7O\"}"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c5166961-dd6d-4e0b-b652-af6e6f7d229a","keyName":"e2e-sub-iso-61f7cf","subscription":"e2e-shared-sub-9a31a5","tenant":"e2e-shared-a-755a0b","userId":"c5166961-dd6d-4e0b-b652-af6e6f7d229a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/sub-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9a31a5"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2ae83ff-2807-4354-9b31-8559e0269c96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60264","PortSpecifier":{"PortValue":60264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60264","PortSpecifier":{"PortValue":60264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784057913,"nanos":118706789},"http":{"id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YJHoyYtuirUWcwxS_V29TmIF6sOCQ1ndYX2IA2ZsgVidAmVSzS2t9ixF1nTw"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YJHoyYtuirUWcwxS_V29TmIF6sOCQ1ndYX2IA2ZsgVidAmVSzS2t9ixF1nTw\"}"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"691f3480-92d6-400e-9a43-b9d0d2f3ff31","keyName":"e2e-sub-iso-6e46bf","subscription":"e2e-shared-sub-9a31a5","tenant":"e2e-shared-b-7c2fbe","userId":"691f3480-92d6-400e-9a43-b9d0d2f3ff31","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/sub-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9a31a5"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:38:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"768c45e8-1264-4fd1-8ea8-85b72a5f0727","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:38:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d653c636b56244aee82eb237bcf268ca1b3abf3345a7bc0e7e79445430ac417"}
{"level":"info","ts":"2026-07-14T19:38:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e634b54d3c30161aa7e1af98923927f03a8a95e89511a8e81f93a4ce0294610"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17a6387427e10a084cb5b90ed875ec712f2189c93916c7b88515bee454ed2203"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/388a0110fa44f5d42ad428fa57945577b9d5c5668cf54ccce4f99cb0e24a1a5f"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56b0b718dfa7310da0204ed93653e8f92428aee865a26cb586114bbab10f4fd6"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aefc90210ae26b514dc3005bc27a82a2896e4eb507962a9ca377aa9d1cffe219"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db82dec21beb9445dd939e6b4533af0dc8a6c574cd631fd1383f8c5537b910c5"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/346830b5db7f60e22ab38560423cd7470668c8caea09f59349bb91602b67778d"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a33a12053553da0a71bbcb7b97337487a80b862bcc97eec17d0cca6ad98cbf8"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c1e5a7251cade47f009194b83929413b01bafae96fd2c9ccd6f88233109ab29"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3310dd0b3e40be90433382cb0555c759e875ed38a415663b45cfaee57d951d17"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44ec0e2f2a552fb9cf0e12ef474f1ccefebe235af94b31db61185f2fd91f0ff5"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6250ac782c05fc6a6f632d4fde215ad07834b13075a1b3d9010ad4ebc896c4d"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/168cb01fa38a187ff657930139cf7391246079e072eeb26ac760cc52239daac7"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16a8b199324f1a73317ac6e8a071670f250f1c4552847bfc75aa28d1bbdfda26"}
{"level":"info","ts":"2026-07-14T19:38:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea361f82f85ae12e44b046c8c09c481d596e660848d1940b53c43ca005d6658a"}
{"level":"debug","ts":"2026-07-14T19:38:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"debug","ts":"2026-07-14T19:38:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"debug","ts":"2026-07-14T19:38:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b"}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2230b0073b4297e5b136ab252b6581544131d824ecaf08c6049604a730e864"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f88d48ba1270cd1bb2898c104e23483d2602c1732a00dc497e7f228d01859c0f"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af2230b0073b4297e5b136ab252b6581544131d824ecaf08c6049604a730e864","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af2230b0073b4297e5b136ab252b6581544131d824ecaf08c6049604a730e864"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b"}
{"level":"info","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af2230b0073b4297e5b136ab252b6581544131d824ecaf08c6049604a730e864","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f88d48ba1270cd1bb2898c104e23483d2602c1732a00dc497e7f228d01859c0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f88d48ba1270cd1bb2898c104e23483d2602c1732a00dc497e7f228d01859c0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2230b0073b4297e5b136ab252b6581544131d824ecaf08c6049604a730e864"}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f88d48ba1270cd1bb2898c104e23483d2602c1732a00dc497e7f228d01859c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f88d48ba1270cd1bb2898c104e23483d2602c1732a00dc497e7f228d01859c0f"}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce"}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af2230b0073b4297e5b136ab252b6581544131d824ecaf08c6049604a730e864","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f88d48ba1270cd1bb2898c104e23483d2602c1732a00dc497e7f228d01859c0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b"}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce"}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce"}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce"}
{"level":"debug","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"error","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"info","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"debug","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"debug","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"debug","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"debug","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"debug","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b"}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4bd64db4d2aa90facbb9ef4dec66792209fe130c68b6f458dd517a988ce4ee31","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4bd64db4d2aa90facbb9ef4dec66792209fe130c68b6f458dd517a988ce4ee31"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2"}
{"level":"debug","ts":"2026-07-14T19:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f"}
{"level":"error","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ea503b21d77204ca26dcfa564d9255851a8a361b467bdf61549710187e92ed3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ea503b21d77204ca26dcfa564d9255851a8a361b467bdf61549710187e92ed3"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T19:40:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af2230b0073b4297e5b136ab252b6581544131d824ecaf08c6049604a730e864","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c"}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af2230b0073b4297e5b136ab252b6581544131d824ecaf08c6049604a730e864"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"}
{"level":"debug","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f88d48ba1270cd1bb2898c104e23483d2602c1732a00dc497e7f228d01859c0f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b"}
{"level":"info","ts":"2026-07-14T19:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f88d48ba1270cd1bb2898c104e23483d2602c1732a00dc497e7f228d01859c0f"}
{"level":"info","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51264","PortSpecifier":{"PortValue":51264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5387319-5b8f-4d80-8573-cb0c2504900b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51264","PortSpecifier":{"PortValue":51264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058004,"nanos":781335888},"http":{"id":"d5387319-5b8f-4d80-8573-cb0c2504900b","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5387319-5b8f-4d80-8573-cb0c2504900b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50106","PortSpecifier":{"PortValue":50106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5322e8c7-0091-4222-b0d7-a75595396d91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50106","PortSpecifier":{"PortValue":50106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058004,"nanos":824580211},"http":{"id":"5322e8c7-0091-4222-b0d7-a75595396d91","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/rate-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5322e8c7-0091-4222-b0d7-a75595396d91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51266","PortSpecifier":{"PortValue":51266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51266","PortSpecifier":{"PortValue":51266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058004,"nanos":869504364},"http":{"id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Py5Dcd16yfIYv5UO_CZwJOQ4NZRQvt00LD1XwVxGyyi0SFXJ63mMrQM2zZgE"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Py5Dcd16yfIYv5UO_CZwJOQ4NZRQvt00LD1XwVxGyyi0SFXJ63mMrQM2zZgE\"}"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2f1acb8-f7be-4a66-8bec-925401325290","keyName":"e2e-rate-a-bac9ba","subscription":"e2e-rate-iso-a-bac9ba","tenant":"e2e-shared-a-755a0b","userId":"d2f1acb8-f7be-4a66-8bec-925401325290","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-bac9ba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bac9ba","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bac9ba"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2f1acb8-f7be-4a66-8bec-925401325290","keyName":"e2e-rate-a-bac9ba","selected_subscription":"e2e-rate-iso-a-bac9ba","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-bac9ba@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bac9ba","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8e85094-f50f-450e-8a16-f98f5bf31e25","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45508","PortSpecifier":{"PortValue":45508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45508","PortSpecifier":{"PortValue":45508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058005,"nanos":933989848},"http":{"id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Py5Dcd16yfIYv5UO_CZwJOQ4NZRQvt00LD1XwVxGyyi0SFXJ63mMrQM2zZgE"}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Py5Dcd16yfIYv5UO_CZwJOQ4NZRQvt00LD1XwVxGyyi0SFXJ63mMrQM2zZgE\"}"}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2f1acb8-f7be-4a66-8bec-925401325290","keyName":"e2e-rate-a-bac9ba","subscription":"e2e-rate-iso-a-bac9ba","tenant":"e2e-shared-a-755a0b","userId":"d2f1acb8-f7be-4a66-8bec-925401325290","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-bac9ba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bac9ba","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bac9ba"}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2f1acb8-f7be-4a66-8bec-925401325290","keyName":"e2e-rate-a-bac9ba","selected_subscription":"e2e-rate-iso-a-bac9ba","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-bac9ba@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bac9ba","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afd519fc-1f6b-4100-8e1f-57f73e83881f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47b44688-7272-456d-9391-0cf00f53c650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45512","PortSpecifier":{"PortValue":45512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47b44688-7272-456d-9391-0cf00f53c650","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47b44688-7272-456d-9391-0cf00f53c650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45512","PortSpecifier":{"PortValue":45512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058006,"nanos":972365125},"http":{"id":"47b44688-7272-456d-9391-0cf00f53c650","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Py5Dcd16yfIYv5UO_CZwJOQ4NZRQvt00LD1XwVxGyyi0SFXJ63mMrQM2zZgE"}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Py5Dcd16yfIYv5UO_CZwJOQ4NZRQvt00LD1XwVxGyyi0SFXJ63mMrQM2zZgE\"}"}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d2f1acb8-f7be-4a66-8bec-925401325290","keyName":"e2e-rate-a-bac9ba","subscription":"e2e-rate-iso-a-bac9ba","tenant":"e2e-shared-a-755a0b","userId":"d2f1acb8-f7be-4a66-8bec-925401325290","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-bac9ba\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bac9ba","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47b44688-7272-456d-9391-0cf00f53c650","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bac9ba"}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47b44688-7272-456d-9391-0cf00f53c650","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d2f1acb8-f7be-4a66-8bec-925401325290","keyName":"e2e-rate-a-bac9ba","selected_subscription":"e2e-rate-iso-a-bac9ba","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-bac9ba@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bac9ba","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47b44688-7272-456d-9391-0cf00f53c650","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47b44688-7272-456d-9391-0cf00f53c650","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45224","PortSpecifier":{"PortValue":45224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a6f655c4-c856-4e06-9a10-e467e37f4902","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45224","PortSpecifier":{"PortValue":45224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058015,"nanos":742070244},"http":{"id":"a6f655c4-c856-4e06-9a10-e467e37f4902","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a6f655c4-c856-4e06-9a10-e467e37f4902","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b16075-1d17-4d88-8e37-55a97b448889","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34762","PortSpecifier":{"PortValue":34762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13b16075-1d17-4d88-8e37-55a97b448889","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13b16075-1d17-4d88-8e37-55a97b448889","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34762","PortSpecifier":{"PortValue":34762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058015,"nanos":784641875},"http":{"id":"13b16075-1d17-4d88-8e37-55a97b448889","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13b16075-1d17-4d88-8e37-55a97b448889","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13b16075-1d17-4d88-8e37-55a97b448889","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"]}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13b16075-1d17-4d88-8e37-55a97b448889","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/2878261d8238"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7744326-d93d-4960-b648-698c5853cd81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"bcdd5307-0ad7-454f-b17c-274ff9baa5ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b16075-1d17-4d88-8e37-55a97b448889","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b16075-1d17-4d88-8e37-55a97b448889","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13b16075-1d17-4d88-8e37-55a97b448889","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/rate-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13b16075-1d17-4d88-8e37-55a97b448889","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b16075-1d17-4d88-8e37-55a97b448889","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13b16075-1d17-4d88-8e37-55a97b448889","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b16075-1d17-4d88-8e37-55a97b448889","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13b16075-1d17-4d88-8e37-55a97b448889","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45230","PortSpecifier":{"PortValue":45230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"071cd813-066a-4f75-86b1-644f1843e9e2","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45230","PortSpecifier":{"PortValue":45230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058015,"nanos":822051663},"http":{"id":"071cd813-066a-4f75-86b1-644f1843e9e2","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"071cd813-066a-4f75-86b1-644f1843e9e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45236","PortSpecifier":{"PortValue":45236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45236","PortSpecifier":{"PortValue":45236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058016,"nanos":855999666},"http":{"id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ca19675-c0eb-4bac-b786-025dcdf7f8f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45250","PortSpecifier":{"PortValue":45250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45250","PortSpecifier":{"PortValue":45250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058017,"nanos":893374988},"http":{"id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01f38fda-38b5-4d0b-a6b1-98e5a211a7a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45262","PortSpecifier":{"PortValue":45262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45262","PortSpecifier":{"PortValue":45262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058018,"nanos":935170234},"http":{"id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff58f4a1-4a07-467c-be98-cc3e36212ae8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45274","PortSpecifier":{"PortValue":45274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45274","PortSpecifier":{"PortValue":45274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058019,"nanos":973020704},"http":{"id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d0d02a8-a2af-4bc7-89f6-01b30eb2b228","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45286","PortSpecifier":{"PortValue":45286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c06007c3-2722-48e4-a390-ef7447d95b31","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45286","PortSpecifier":{"PortValue":45286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058021,"nanos":12012741},"http":{"id":"c06007c3-2722-48e4-a390-ef7447d95b31","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c06007c3-2722-48e4-a390-ef7447d95b31","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45290","PortSpecifier":{"PortValue":45290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45290","PortSpecifier":{"PortValue":45290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058022,"nanos":48506811},"http":{"id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"28ffb6dc-ec9d-466b-ab00-3211970b3f6c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c1da2d2-a007-485b-9d19-379917f744f9","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45306","PortSpecifier":{"PortValue":45306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058023,"nanos":82525495},"http":{"id":"0c1da2d2-a007-485b-9d19-379917f744f9","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c1da2d2-a007-485b-9d19-379917f744f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c203274b-07cb-4840-89d6-bdbbb472b11e","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45322","PortSpecifier":{"PortValue":45322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058024,"nanos":121862436},"http":{"id":"c203274b-07cb-4840-89d6-bdbbb472b11e","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c203274b-07cb-4840-89d6-bdbbb472b11e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45324","PortSpecifier":{"PortValue":45324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","method":"POST","path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions","host":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:45324","PortSpecifier":{"PortValue":45324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058025,"nanos":169174871},"http":{"id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","method":"POST","headers":{":authority":"e2e-shared-a-755a0b.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-UywwxkHtOQI6MICO_QD6XsSIHrjwJiYo0S5ysyNTM0A3V29FJ8gWFl0QQJtH\"}"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","subscription":"e2e-rate-iso-a-7d3c54","tenant":"e2e-shared-a-755a0b","userId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\",\"requestedSubscription\":\"e2e-rate-iso-a-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-755a0b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-755a0b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1d0aa744-f15e-4779-b86d-d98e5cb421c3","keyName":"e2e-rate-a-7d3c54","selected_subscription":"e2e-rate-iso-a-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-a-755a0b/e2e-rate-iso-a-7d3c54@ai-tenant-e2e-shared-a-755a0b/rate-test-model-755a0b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-755a0b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7d3c54","namespace":"ai-tenant-e2e-shared-a-755a0b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ce1756e9-d7e2-4255-a2a8-14138afbb5f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea45b165-baa4-4387-ace9-0d781485007c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34778","PortSpecifier":{"PortValue":34778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea45b165-baa4-4387-ace9-0d781485007c","method":"POST","path":"/ai-tenant-e2e-shared-b-7c2fbe/rate-test-model-7c2fbe/v1/completions","host":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea45b165-baa4-4387-ace9-0d781485007c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34778","PortSpecifier":{"PortValue":34778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784058025,"nanos":205246303},"http":{"id":"ea45b165-baa4-4387-ace9-0d781485007c","method":"POST","headers":{":authority":"e2e-shared-b-7c2fbe.apps.7c2a1dfd-dec1-4c75-aab3-2878261d8238.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-7c2fbe/rate-test-model-7c2fbe/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1T9HT7MCqp35vvmCQ_CuHG6uEUUeLpVxvpYuAxPjCJs5MgGssManmNiRhw7u8"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1T9HT7MCqp35vvmCQ_CuHG6uEUUeLpVxvpYuAxPjCJs5MgGssManmNiRhw7u8\"}"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7d78c4b4-ab42-484d-bed3-899040907b37","keyName":"e2e-rate-b-7d3c54","subscription":"e2e-rate-iso-b-7d3c54","tenant":"e2e-shared-b-7c2fbe","userId":"7d78c4b4-ab42-484d-bed3-899040907b37","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-7c2fbe/rate-test-model-7c2fbe\",\"requestedSubscription\":\"e2e-rate-iso-b-7d3c54\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7c2fbe.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7c2fbe","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7d3c54","namespace":"ai-tenant-e2e-shared-b-7c2fbe","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea45b165-baa4-4387-ace9-0d781485007c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7c2fbe/rate-test-model-7c2fbe\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7c2fbe/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-7d3c54"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea45b165-baa4-4387-ace9-0d781485007c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"7d78c4b4-ab42-484d-bed3-899040907b37","keyName":"e2e-rate-b-7d3c54","selected_subscription":"e2e-rate-iso-b-7d3c54","selected_subscription_key":"ai-tenant-e2e-shared-b-7c2fbe/e2e-rate-iso-b-7d3c54@ai-tenant-e2e-shared-b-7c2fbe/rate-test-model-7c2fbe","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7c2fbe","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-7d3c54","namespace":"ai-tenant-e2e-shared-b-7c2fbe","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea45b165-baa4-4387-ace9-0d781485007c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T19:40:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea45b165-baa4-4387-ace9-0d781485007c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T19:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f88d48ba1270cd1bb2898c104e23483d2602c1732a00dc497e7f228d01859c0f"}
{"level":"info","ts":"2026-07-14T19:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d11c7159a51168a6097d38a9ecfda81d4ed9ccff38893edec694cbc8caa2c57b"}
{"level":"info","ts":"2026-07-14T19:40:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78dd97124000080f31bb7469ca7cdce87f226ebd4a16a93a1d3b620bbe44604d"}
{"level":"info","ts":"2026-07-14T19:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0226f39ef05f463edc6f025a727bf6db7aa3fba953489190cb19375e4b8400ce"}
{"level":"info","ts":"2026-07-14T19:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af2230b0073b4297e5b136ab252b6581544131d824ecaf08c6049604a730e864"}
{"level":"info","ts":"2026-07-14T19:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40d1db46deae10909f4d9425cf7c81e5d848f5b0830e9a311f87ae5da7a602b"}
{"level":"info","ts":"2026-07-14T19:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfec727e28b237caafec5038cd093ebc4bbd92dbf7f54115a32a209dfd01d67c"}
{"level":"info","ts":"2026-07-14T19:40:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/efbe98e7e4842ebd5eddc3f7017e6d799417f0f7d5c910e0af99c058c66d1d4e"}
{"level":"info","ts":"2026-07-14T19:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acee0d0cb8419337715f58b636caae25bbba76e33deaa32bfc122e214e465be7"}
{"level":"info","ts":"2026-07-14T19:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6e5a9e6f811753bca8b035fd685e3876023743434f2cdbd75bc88a620a3942b"}
{"level":"info","ts":"2026-07-14T19:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebd3e11056486e69d0ca98c84fab8e1c247a80c2a3d911d8c13267ec8daac7a4"}
{"level":"info","ts":"2026-07-14T19:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1211b50012e5aa68af6e816ef41ae4772958b19ecfaf594a1e7807ebbbbfb46"}
{"level":"info","ts":"2026-07-14T19:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5cb7b46065511e90276303033ee7ddcee021f3f8746694bee9a2a94f4c8b1f9"}
{"level":"info","ts":"2026-07-14T19:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2c87d2c51d17c9a61878e1886898ccbd54caf28654d81dbac201aa7b35a1598"}
{"level":"info","ts":"2026-07-14T19:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b8de191976c7df4366f62edd291282ba807fe2f84593917ccc54e2fcbdc8eca"}
{"level":"info","ts":"2026-07-14T19:40:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c4f3d59314001016a04d4cc9351aedeb4fcec3a2ff1bdc8243666fe85525eec"}
{"level":"info","ts":"2026-07-14T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ea503b21d77204ca26dcfa564d9255851a8a361b467bdf61549710187e92ed3"}
{"level":"info","ts":"2026-07-14T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4bd64db4d2aa90facbb9ef4dec66792209fe130c68b6f458dd517a988ce4ee31"}
{"level":"info","ts":"2026-07-14T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3aa4a7e5b933355bd4b69e2e37c7823f685253eb251df0f9a6b92ae49aa3321"}
{"level":"info","ts":"2026-07-14T19:41:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e1c209f7125c61f76d04eeb49f818223c2f9c6bf5e519d14abcdf2eb9256f5f"}
{"level":"info","ts":"2026-07-14T19:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bdb970a8b704e7ff7466300eafeba575f0de89edf0d1ec9434009132f98ed3b2"}
{"level":"info","ts":"2026-07-14T19:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de9c2f705df91f8c11763b18f5df4f92e0275e8807966d54440269c320d8fe68"}
{"level":"info","ts":"2026-07-14T19:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9f860847153e195b2e21f719645c0dde03e09648461fc0748262cf6bbb1a219"}
{"level":"info","ts":"2026-07-14T19:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2f0d06d44a78d2471c23e452f7d9dd0b621bce5285ab1953e7f5ad8493cbcca0"}