--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f5995bf7678fae3c833f418910c484e6e818350d561c69ecbf74dd70c3f8027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f5995bf7678fae3c833f418910c484e6e818350d561c69ecbf74dd70c3f8027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ae7d7572377d1195f819f319e9d3490e45b035fcd34cbced5dd0b544d017e9"}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f5995bf7678fae3c833f418910c484e6e818350d561c69ecbf74dd70c3f8027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f5995bf7678fae3c833f418910c484e6e818350d561c69ecbf74dd70c3f8027"}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e8c0b861386fa348eab250451fac8a86a446da6b8fc71b9c686e17915af2e53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643cb21c86b5bbf63493af4ff0068ebb2022aa568d05042df9a28c7a3a999341","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ae7d7572377d1195f819f319e9d3490e45b035fcd34cbced5dd0b544d017e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f5995bf7678fae3c833f418910c484e6e818350d561c69ecbf74dd70c3f8027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59"}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59"}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:31:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59"}
{"level":"error","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:31:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4"}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4"}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4"}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"error","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"}
{"level":"info","ts":"2026-07-09T15:32:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a"}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ee444bd194b8a81660dc2faae4da292b3aca16fe9af357d34a10e4003a826cf"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ee444bd194b8a81660dc2faae4da292b3aca16fe9af357d34a10e4003a826cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ee444bd194b8a81660dc2faae4da292b3aca16fe9af357d34a10e4003a826cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ee444bd194b8a81660dc2faae4da292b3aca16fe9af357d34a10e4003a826cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ee444bd194b8a81660dc2faae4da292b3aca16fe9af357d34a10e4003a826cf"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ee444bd194b8a81660dc2faae4da292b3aca16fe9af357d34a10e4003a826cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae29af7b14cb7e8b1f510d2470d5cf1a2f42d08462c8eefb59236767afc223b1"}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae29af7b14cb7e8b1f510d2470d5cf1a2f42d08462c8eefb59236767afc223b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae29af7b14cb7e8b1f510d2470d5cf1a2f42d08462c8eefb59236767afc223b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"}
{"level":"info","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae29af7b14cb7e8b1f510d2470d5cf1a2f42d08462c8eefb59236767afc223b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae29af7b14cb7e8b1f510d2470d5cf1a2f42d08462c8eefb59236767afc223b1"}
{"level":"info","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae29af7b14cb7e8b1f510d2470d5cf1a2f42d08462c8eefb59236767afc223b1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:32:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:32:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"}
{"level":"info","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"}
{"level":"info","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:32:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:32:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"}
{"level":"error","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:32:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10d62885-0602-4c15-8628-61f5b7772dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50898","PortSpecifier":{"PortValue":50898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10d62885-0602-4c15-8628-61f5b7772dea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10d62885-0602-4c15-8628-61f5b7772dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50898","PortSpecifier":{"PortValue":50898}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611125,"nanos":861844620},"http":{"id":"10d62885-0602-4c15-8628-61f5b7772dea","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10d62885-0602-4c15-8628-61f5b7772dea","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10d62885-0602-4c15-8628-61f5b7772dea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10d62885-0602-4c15-8628-61f5b7772dea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10d62885-0602-4c15-8628-61f5b7772dea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10d62885-0602-4c15-8628-61f5b7772dea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10d62885-0602-4c15-8628-61f5b7772dea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10d62885-0602-4c15-8628-61f5b7772dea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10d62885-0602-4c15-8628-61f5b7772dea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10d62885-0602-4c15-8628-61f5b7772dea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10d62885-0602-4c15-8628-61f5b7772dea","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10d62885-0602-4c15-8628-61f5b7772dea","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:47748","PortSpecifier":{"PortValue":47748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:47748","PortSpecifier":{"PortValue":47748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611125,"nanos":926143769},"http":{"id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/auth-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a1f31f4-f917-4132-8a4b-65e85aeb1775","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","method":"GET","path":"/maas-api/v1/api-keys/60302120-a176-4dc8-a189-f8c082d66d72","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:50908","PortSpecifier":{"PortValue":50908}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611126,"nanos":8462808},"http":{"id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","method":"GET","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/60302120-a176-4dc8-a189-f8c082d66d72",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/60302120-a176-4dc8-a189-f8c082d66d72",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7b287d1-8463-4b80-b184-cfcfb4e7e2fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:47750","PortSpecifier":{"PortValue":47750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","method":"GET","path":"/maas-api/v1/api-keys/bcb0e849-3e3e-4e33-8bd7-bc67892f19ce","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:47750","PortSpecifier":{"PortValue":47750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611126,"nanos":41042721},"http":{"id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","method":"GET","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bcb0e849-3e3e-4e33-8bd7-bc67892f19ce",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/bcb0e849-3e3e-4e33-8bd7-bc67892f19ce",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/auth-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a99dc1a1-e0c6-4684-88b5-89130cf9f575","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60014","PortSpecifier":{"PortValue":60014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60014","PortSpecifier":{"PortValue":60014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611145,"nanos":395965638},"http":{"id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2db733bf-ca11-4f1d-8cc4-502df74c220e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd96e466-a29b-4425-8795-2248c83ec180","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36484","PortSpecifier":{"PortValue":36484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd96e466-a29b-4425-8795-2248c83ec180","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd96e466-a29b-4425-8795-2248c83ec180","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36484","PortSpecifier":{"PortValue":36484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611145,"nanos":453321178},"http":{"id":"dd96e466-a29b-4425-8795-2248c83ec180","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd96e466-a29b-4425-8795-2248c83ec180","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd96e466-a29b-4425-8795-2248c83ec180","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd96e466-a29b-4425-8795-2248c83ec180","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd96e466-a29b-4425-8795-2248c83ec180","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd96e466-a29b-4425-8795-2248c83ec180","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd96e466-a29b-4425-8795-2248c83ec180","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/auth-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd96e466-a29b-4425-8795-2248c83ec180","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd96e466-a29b-4425-8795-2248c83ec180","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd96e466-a29b-4425-8795-2248c83ec180","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd96e466-a29b-4425-8795-2248c83ec180","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd96e466-a29b-4425-8795-2248c83ec180","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60016","PortSpecifier":{"PortValue":60016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:60016","PortSpecifier":{"PortValue":60016}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611145,"nanos":493802149},"http":{"id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","method":"GET","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ynhoWS7aiAeFvYs0_AgQ8DCvawNBQA2uSqmHVRnuXorwnLu0ErjW2rXgjmBt"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ynhoWS7aiAeFvYs0_AgQ8DCvawNBQA2uSqmHVRnuXorwnLu0ErjW2rXgjmBt\"}"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7191d095-f8b9-4dc7-8ab9-78cbf5de06ff","keyName":"e2e-auth-iso-a-d42033","subscription":"e2e-auth-iso-1524f2","tenant":"e2e-shared-a-bf561e","userId":"7191d095-f8b9-4dc7-8ab9-78cbf5de06ff","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1524f2"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:32:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"937b9a4a-75ca-4b55-9a6e-806cfcc90bb6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37670","PortSpecifier":{"PortValue":37670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82c7209f-5986-4772-84a7-51f92b8144c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37670","PortSpecifier":{"PortValue":37670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611162,"nanos":773800289},"http":{"id":"82c7209f-5986-4772-84a7-51f92b8144c5","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82c7209f-5986-4772-84a7-51f92b8144c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37882","PortSpecifier":{"PortValue":37882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"190b965a-9573-4c30-a9e7-3b1656974ea9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37882","PortSpecifier":{"PortValue":37882}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611162,"nanos":813067925},"http":{"id":"190b965a-9573-4c30-a9e7-3b1656974ea9","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/auth-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"190b965a-9573-4c30-a9e7-3b1656974ea9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37886","PortSpecifier":{"PortValue":37886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37886","PortSpecifier":{"PortValue":37886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611162,"nanos":851694891},"http":{"id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","method":"GET","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10nBaCM3w5iB1GRul_rd9DviDprHNY5czlOAudVLtpx9IWP6z7iyIDCqqyrMA"}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10nBaCM3w5iB1GRul_rd9DviDprHNY5czlOAudVLtpx9IWP6z7iyIDCqqyrMA\"}"}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-09T15:32:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b3bddc1f-c3fb-4d19-8fb5-6691856483be","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57038","PortSpecifier":{"PortValue":57038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57038","PortSpecifier":{"PortValue":57038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611182,"nanos":219595119},"http":{"id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c72980d2-b89d-43ae-a612-fa67e7ee5f00","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36094","PortSpecifier":{"PortValue":36094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36094","PortSpecifier":{"PortValue":36094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611182,"nanos":254666605},"http":{"id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/auth-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e6e88558-96cb-4107-9df6-69f84c7b05d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57042","PortSpecifier":{"PortValue":57042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57042","PortSpecifier":{"PortValue":57042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611182,"nanos":289595744},"http":{"id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df88e72f-8af5-4d5b-84d2-bc0c627843fd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"378db953-01ce-4098-a215-f37decb79166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36098","PortSpecifier":{"PortValue":36098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"378db953-01ce-4098-a215-f37decb79166","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"378db953-01ce-4098-a215-f37decb79166","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:36098","PortSpecifier":{"PortValue":36098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611182,"nanos":328051254},"http":{"id":"378db953-01ce-4098-a215-f37decb79166","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"378db953-01ce-4098-a215-f37decb79166","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"378db953-01ce-4098-a215-f37decb79166","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"378db953-01ce-4098-a215-f37decb79166","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"378db953-01ce-4098-a215-f37decb79166","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"378db953-01ce-4098-a215-f37decb79166","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"378db953-01ce-4098-a215-f37decb79166","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/auth-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"378db953-01ce-4098-a215-f37decb79166","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"378db953-01ce-4098-a215-f37decb79166","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"378db953-01ce-4098-a215-f37decb79166","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"378db953-01ce-4098-a215-f37decb79166","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"378db953-01ce-4098-a215-f37decb79166","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:43300","PortSpecifier":{"PortValue":43300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:43300","PortSpecifier":{"PortValue":43300}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611199,"nanos":602176873},"http":{"id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96d58bbe-fac9-42b5-9ed4-0486741565e2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:41322","PortSpecifier":{"PortValue":41322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:41322","PortSpecifier":{"PortValue":41322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611199,"nanos":636974910},"http":{"id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/auth-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71e72195-1950-4dcb-8e2b-e8d35c69e3f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:41326","PortSpecifier":{"PortValue":41326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","method":"GET","path":"/maas-api/v1/api-keys/44ae91f0-a814-4241-a12a-be455f06d788","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:41326","PortSpecifier":{"PortValue":41326}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611199,"nanos":672962034},"http":{"id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","method":"GET","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/44ae91f0-a814-4241-a12a-be455f06d788",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/44ae91f0-a814-4241-a12a-be455f06d788",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/auth-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a468d4ed-27e1-435e-8df2-e4029d226ec9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:43302","PortSpecifier":{"PortValue":43302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","method":"GET","path":"/maas-api/v1/api-keys/44ae91f0-a814-4241-a12a-be455f06d788","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:43302","PortSpecifier":{"PortValue":43302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611199,"nanos":702873541},"http":{"id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","method":"GET","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/44ae91f0-a814-4241-a12a-be455f06d788",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/44ae91f0-a814-4241-a12a-be455f06d788",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b111910-7eaf-480c-9dfd-fe5e35a15993","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40972","PortSpecifier":{"PortValue":40972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40972","PortSpecifier":{"PortValue":40972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611217,"nanos":40710147},"http":{"id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c2314e92-ee05-4ea5-ad61-6430c6cad562","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53958","PortSpecifier":{"PortValue":53958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53958","PortSpecifier":{"PortValue":53958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611217,"nanos":74365294},"http":{"id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/auth-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f365424c-34c1-42ac-ab7c-6f2fc15ec5dc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36254d44-df75-480f-bf9f-90103953a9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40986","PortSpecifier":{"PortValue":40986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36254d44-df75-480f-bf9f-90103953a9c9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36254d44-df75-480f-bf9f-90103953a9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:40986","PortSpecifier":{"PortValue":40986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611217,"nanos":111424960},"http":{"id":"36254d44-df75-480f-bf9f-90103953a9c9","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5SHtRLgOoNEeONwA_rIwPnzOlmEkctvqoWzrlAq8wcqp6iE20YsQJNHnF0hL"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5SHtRLgOoNEeONwA_rIwPnzOlmEkctvqoWzrlAq8wcqp6iE20YsQJNHnF0hL\"}"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b6e62b7e-7c0b-42e5-8452-5f5c45203f7b","keyName":"e2e-auth-iso-a-482d54","subscription":"e2e-auth-iso-b21830","tenant":"e2e-shared-a-bf561e","userId":"b6e62b7e-7c0b-42e5-8452-5f5c45203f7b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36254d44-df75-480f-bf9f-90103953a9c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/auth-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b21830"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36254d44-df75-480f-bf9f-90103953a9c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36254d44-df75-480f-bf9f-90103953a9c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:33:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36254d44-df75-480f-bf9f-90103953a9c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/643cb21c86b5bbf63493af4ff0068ebb2022aa568d05042df9a28c7a3a999341"}
{"level":"info","ts":"2026-07-09T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47cc5526bbb5b5cf08821cbdc9ef49938ce774deafc6950d98a104d8ded6e7ee"}
{"level":"info","ts":"2026-07-09T15:33:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae29af7b14cb7e8b1f510d2470d5cf1a2f42d08462c8eefb59236767afc223b1"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbc2c2c6b95e04e67a6268063c78d15db64c643ee57c240b0226a07f8981b8e2"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b03bac70ef4670382046a5f746c188fb097e42903039b0c024196ac97df9e211"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f96b7ad234a1ff2e9bb54b6452a3442cc44238c3cfd6b5a96680eff6a0188a4"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41d1dc81feb755e02856b21745b88173059930a788b0fceee5ccb78ba234ca3a"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59e45fcdb13b71120bfcadc75a833175baa0c40ad6e3c855f0652133371feb63"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83993c8c6bd0f6df6c78d823e7d7ddeabb2a8f7e3c77f354ea806517f0e44c15"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a2d969b55bf30191bfe89a99c72dbbcac1c7ca60185990e7e57c3696d849b49"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcdc6190a57fe8cf1a0020647bb05e942a7577b4ef5aee041f026fd7fce78f59"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71856ec94af221b29909b2b19e8fcb6cd1e2c8956e7ee79b586fbe4da0546a6a"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e8c0b861386fa348eab250451fac8a86a446da6b8fc71b9c686e17915af2e53"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a26056cb2a7ac82d9756e4bdc846f8a25f1d45a7e31c90440d2918a9d286d8bc"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ee444bd194b8a81660dc2faae4da292b3aca16fe9af357d34a10e4003a826cf"}
{"level":"info","ts":"2026-07-09T15:33:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f5995bf7678fae3c833f418910c484e6e818350d561c69ecbf74dd70c3f8027"}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e"}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e"}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e"}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e"}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e"}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959"}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959"}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959"}
{"level":"error","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"}
{"level":"error","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434"}
{"level":"error","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"}
{"level":"error","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"error","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"debug","ts":"2026-07-09T15:33:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"debug","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:33:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:33:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"debug","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:33:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:33:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:33:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"error","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"}
{"level":"info","ts":"2026-07-09T15:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"error","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"error","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"error","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ae7d7572377d1195f819f319e9d3490e45b035fcd34cbced5dd0b544d017e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ae7d7572377d1195f819f319e9d3490e45b035fcd34cbced5dd0b544d017e9"}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:34:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:34:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"debug","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e"}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe"}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434"}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460"}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5"}
{"level":"info","ts":"2026-07-09T15:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959"}
{"level":"info","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1273705f-a458-4867-8877-88acbf2d8dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1273705f-a458-4867-8877-88acbf2d8dba","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1273705f-a458-4867-8877-88acbf2d8dba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611300,"nanos":539962171},"http":{"id":"1273705f-a458-4867-8877-88acbf2d8dba","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1273705f-a458-4867-8877-88acbf2d8dba","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1273705f-a458-4867-8877-88acbf2d8dba","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1273705f-a458-4867-8877-88acbf2d8dba","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1273705f-a458-4867-8877-88acbf2d8dba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1273705f-a458-4867-8877-88acbf2d8dba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1273705f-a458-4867-8877-88acbf2d8dba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/sub-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1273705f-a458-4867-8877-88acbf2d8dba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1273705f-a458-4867-8877-88acbf2d8dba","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1273705f-a458-4867-8877-88acbf2d8dba","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1273705f-a458-4867-8877-88acbf2d8dba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1273705f-a458-4867-8877-88acbf2d8dba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:52454","PortSpecifier":{"PortValue":52454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30393277-5762-43aa-b9c7-54c4781d2b56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:52454","PortSpecifier":{"PortValue":52454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611300,"nanos":582187557},"http":{"id":"30393277-5762-43aa-b9c7-54c4781d2b56","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/sub-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30393277-5762-43aa-b9c7-54c4781d2b56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84c73e00-84b7-9afa-a072-80be1014959b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:41222","PortSpecifier":{"PortValue":41222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84c73e00-84b7-9afa-a072-80be1014959b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84c73e00-84b7-9afa-a072-80be1014959b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:41222","PortSpecifier":{"PortValue":41222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611300,"nanos":628243293},"http":{"id":"84c73e00-84b7-9afa-a072-80be1014959b","method":"GET","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YfYBXFgIAesXADmg_O3xFDHG76HI3X9rhe0QOqNcREVB0kS2PPw6r8PEzrVK"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YfYBXFgIAesXADmg_O3xFDHG76HI3X9rhe0QOqNcREVB0kS2PPw6r8PEzrVK\"}"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c9a3b25-40fe-4800-b801-8024b0712190","keyName":"e2e-sub-iso-493e57","subscription":"e2e-a-only-dd1842","tenant":"e2e-shared-a-bf561e","userId":"2c9a3b25-40fe-4800-b801-8024b0712190","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84c73e00-84b7-9afa-a072-80be1014959b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/sub-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84c73e00-84b7-9afa-a072-80be1014959b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-dd1842"}
{"level":"info","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84c73e00-84b7-9afa-a072-80be1014959b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84c73e00-84b7-9afa-a072-80be1014959b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:52456","PortSpecifier":{"PortValue":52456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:52456","PortSpecifier":{"PortValue":52456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611300,"nanos":670120822},"http":{"id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","method":"GET","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-O9Uk0U3mrMoraNXb_VATGo8BWUdXA7L12SZz5lyGclPsSQX7pGRrFKmkLHJw"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-O9Uk0U3mrMoraNXb_VATGo8BWUdXA7L12SZz5lyGclPsSQX7pGRrFKmkLHJw\"}"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aaad49b5-db57-4ef4-b791-2165519f561b","keyName":"e2e-sub-iso-e4f8b0","subscription":"e2e-b-only-dd1842","tenant":"e2e-shared-b-497419","userId":"aaad49b5-db57-4ef4-b791-2165519f561b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/sub-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-dd1842"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"564d6de6-a942-4bb4-a224-4eccf5ac4c1f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53540","PortSpecifier":{"PortValue":53540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53540","PortSpecifier":{"PortValue":53540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611310,"nanos":985177944},"http":{"id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/sub-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:35:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a9ee90d-dc75-41ab-aa9a-9e242f204dda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39086","PortSpecifier":{"PortValue":39086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39086","PortSpecifier":{"PortValue":39086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611311,"nanos":19963491},"http":{"id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/sub-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a126a0f-d83e-4b1a-b295-3e13036167cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53546","PortSpecifier":{"PortValue":53546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53546","PortSpecifier":{"PortValue":53546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611311,"nanos":58079334},"http":{"id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rYk9ahurMCGWi0gw_khSGE1Xz8ndnMF9HqDYyCQmO91gGFTDsgBMZkZPmRog"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rYk9ahurMCGWi0gw_khSGE1Xz8ndnMF9HqDYyCQmO91gGFTDsgBMZkZPmRog\"}"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5cbc22d6-081c-42e7-8894-0e583b637414","keyName":"e2e-sub-iso-239b65","subscription":"e2e-shared-sub-b2ba8c","tenant":"e2e-shared-a-bf561e","userId":"5cbc22d6-081c-42e7-8894-0e583b637414","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/sub-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b2ba8c"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8e2c39e-acd5-4e29-bdb9-d16fd9fa8a3f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39090","PortSpecifier":{"PortValue":39090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39090","PortSpecifier":{"PortValue":39090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611311,"nanos":88447228},"http":{"id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12dA7V5D0HIoqyBJc_bN70JhIT1qGUlGfnbPYCSJkVA8eJAhhjwJVf9KSPbbq"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12dA7V5D0HIoqyBJc_bN70JhIT1qGUlGfnbPYCSJkVA8eJAhhjwJVf9KSPbbq\"}"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"815e3ed4-af87-45e1-a3ef-6f2e9356a6bb","keyName":"e2e-sub-iso-227b56","subscription":"e2e-shared-sub-b2ba8c","tenant":"e2e-shared-b-497419","userId":"815e3ed4-af87-45e1-a3ef-6f2e9356a6bb","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/sub-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-b2ba8c"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:35:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"026a6a12-01c5-4598-b3f5-9f0dcfeb7262","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dcb2ab6fcb70fab1838031a4d9234f2bc99bf182564bcc8718535c52455616ea"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71d6d24ba7ce094dcacdd8dbb1c3cdb72e030a9a27fdfe060123f68bead98c8a"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b1a27f80b7da7188c3329d119525491458f548101f62773f6815ca3a387fe0e"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97e65a2d0492b2e7828b7765cbad30e0f5f4462b44fa68f65424218e5dda48e9"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6ffe3a0f32e0b0a9b9a8ea5a8ba17fc8b9e8a44475e02209fa149396c3f157c"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63e71c3ea740a70cc46472902ef843d3fc22165c59f7cb9566ef7cfa57663cf5"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da41239f7fe6e0e31af491d3340d5ff0b9ed74b4716632e1f94836769f51f75e"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8ae645b19fa64c8cdc78d2ecb2510aa760d5836922284f710d0c72c88f03f34"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f7060e3b69fc528abfb131ba64ba0733536a4b470ea4787bf1273a0f46a2b015"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a185b4a4fdedcbecb824199d3c354d78040e2e59475faf9d12bf678d62f64e4"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f24f6ce0cb70775a4a9f4ffd4c6fc8071745d88df1206db642bd49024d50b434"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a705912060731a5bf750d3a06d700d45244009104245be455bb74878dfa71d33"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/800f9384451fe2e87d21a4c9ff9809ddce1bf66e142ed6931f4b07d1da96ef94"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19b89fe40dbbbf6712152d908e7732e912b4ab1666628a7e1f0cdd43e6ef582e"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2296eff08587d354c5121ca7ed8e2f277400da72248ea7d341a3c0eb8fbfb959"}
{"level":"info","ts":"2026-07-09T15:35:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/057122ecc86e46966f2874bf9e3613b6789a525150390eb3a63ca972348992fe"}
{"level":"debug","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"}
{"level":"info","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"}
{"level":"info","ts":"2026-07-09T15:35:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"}
{"level":"error","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11"}
{"level":"error","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11"}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"}
{"level":"debug","ts":"2026-07-09T15:35:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11"}
{"level":"info","ts":"2026-07-09T15:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4"}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4"}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4"}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4"}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476"}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4"}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476"}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"}
{"level":"debug","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6"}
{"level":"error","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71"}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"}
{"level":"error","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a"}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:35:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda"}
{"level":"info","ts":"2026-07-09T15:35:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ae7d7572377d1195f819f319e9d3490e45b035fcd34cbced5dd0b544d017e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a"}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ae7d7572377d1195f819f319e9d3490e45b035fcd34cbced5dd0b544d017e9"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfea2a47467717d4d4b0a26e5cec25323b54ad1ee1aa724dd7350b62f3507460"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8"}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71"}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:36:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T15:36:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T15:36:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T15:36:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T15:36:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}
{"level":"error","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4"}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f"}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fef3087cc5da3715f76063c79d44c91c20a31616698f1ee16d92c1187beb2b2"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda"}
{"level":"debug","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"}
{"level":"info","ts":"2026-07-09T15:36:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc396a42c65aecc7f96a92535c05dee18fa5491f77b5ee3175b02c22f9814839"}
{"level":"info","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39634","PortSpecifier":{"PortValue":39634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39634","PortSpecifier":{"PortValue":39634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611364,"nanos":561922765},"http":{"id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdd59776-5086-4a8f-82ad-0629e6fa9fab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57130","PortSpecifier":{"PortValue":57130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af3189c5-5498-4afa-a0ad-40be95221fcf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57130","PortSpecifier":{"PortValue":57130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611364,"nanos":633057258},"http":{"id":"af3189c5-5498-4afa-a0ad-40be95221fcf","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/rate-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af3189c5-5498-4afa-a0ad-40be95221fcf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39646","PortSpecifier":{"PortValue":39646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39646","PortSpecifier":{"PortValue":39646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611364,"nanos":670851563},"http":{"id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZerS17lxATxsq2xL_fmJKiEi321SeC8U6R6m0O4dPh2yH0zYnI6uj7vnTagU"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZerS17lxATxsq2xL_fmJKiEi321SeC8U6R6m0O4dPh2yH0zYnI6uj7vnTagU\"}"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e7c72d29-849c-4810-b762-4d55ddec744f","keyName":"e2e-rate-a-784500","subscription":"e2e-rate-iso-a-784500","tenant":"e2e-shared-a-bf561e","userId":"e7c72d29-849c-4810-b762-4d55ddec744f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-784500\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-784500","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-784500"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e7c72d29-849c-4810-b762-4d55ddec744f","keyName":"e2e-rate-a-784500","selected_subscription":"e2e-rate-iso-a-784500","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-784500@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-784500","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdc22035-cf3d-4391-b8c6-7429bad15ac0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39660","PortSpecifier":{"PortValue":39660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70ff21eb-2a39-440b-a39a-991d6d831406","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39660","PortSpecifier":{"PortValue":39660}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611365,"nanos":728968306},"http":{"id":"70ff21eb-2a39-440b-a39a-991d6d831406","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZerS17lxATxsq2xL_fmJKiEi321SeC8U6R6m0O4dPh2yH0zYnI6uj7vnTagU"}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZerS17lxATxsq2xL_fmJKiEi321SeC8U6R6m0O4dPh2yH0zYnI6uj7vnTagU\"}"}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e7c72d29-849c-4810-b762-4d55ddec744f","keyName":"e2e-rate-a-784500","subscription":"e2e-rate-iso-a-784500","tenant":"e2e-shared-a-bf561e","userId":"e7c72d29-849c-4810-b762-4d55ddec744f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-784500\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-784500","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-784500"}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e7c72d29-849c-4810-b762-4d55ddec744f","keyName":"e2e-rate-a-784500","selected_subscription":"e2e-rate-iso-a-784500","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-784500@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-784500","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70ff21eb-2a39-440b-a39a-991d6d831406","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39670","PortSpecifier":{"PortValue":39670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"851862f3-f54c-480e-ad95-8f6e4c975af2","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:39670","PortSpecifier":{"PortValue":39670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611366,"nanos":762606256},"http":{"id":"851862f3-f54c-480e-ad95-8f6e4c975af2","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZerS17lxATxsq2xL_fmJKiEi321SeC8U6R6m0O4dPh2yH0zYnI6uj7vnTagU"}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZerS17lxATxsq2xL_fmJKiEi321SeC8U6R6m0O4dPh2yH0zYnI6uj7vnTagU\"}"}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e7c72d29-849c-4810-b762-4d55ddec744f","keyName":"e2e-rate-a-784500","subscription":"e2e-rate-iso-a-784500","tenant":"e2e-shared-a-bf561e","userId":"e7c72d29-849c-4810-b762-4d55ddec744f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-784500\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-784500","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-784500"}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e7c72d29-849c-4810-b762-4d55ddec744f","keyName":"e2e-rate-a-784500","selected_subscription":"e2e-rate-iso-a-784500","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-784500@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-784500","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"851862f3-f54c-480e-ad95-8f6e4c975af2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53682","PortSpecifier":{"PortValue":53682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53682","PortSpecifier":{"PortValue":53682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611375,"nanos":489658519},"http":{"id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df9ccbd1-9069-48f5-bee2-81965383fdb1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37160","PortSpecifier":{"PortValue":37160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddddc228-9f9c-4530-8c45-8b287a067b24","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:37160","PortSpecifier":{"PortValue":37160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611375,"nanos":527024740},"http":{"id":"ddddc228-9f9c-4530-8c45-8b287a067b24","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"]}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/86e43f1f7dee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=e3e08cf9-5f69-4186-9e20-224b161d118e"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"6402c145-18cc-49a7-9e29-fa9bc47ad3ed","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d5504fe62b8e55ebf23f874bf846c88a4080911486ee2076f2a0ebc2d8e7e6c5"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/rate-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddddc228-9f9c-4530-8c45-8b287a067b24","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53696","PortSpecifier":{"PortValue":53696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53696","PortSpecifier":{"PortValue":53696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611375,"nanos":562267453},"http":{"id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17efbe74-f9b7-4d6e-b807-dd99c5e8ec24","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9777e62f-e928-4fae-b321-6d003187a279","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53698","PortSpecifier":{"PortValue":53698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9777e62f-e928-4fae-b321-6d003187a279","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9777e62f-e928-4fae-b321-6d003187a279","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53698","PortSpecifier":{"PortValue":53698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611376,"nanos":594882522},"http":{"id":"9777e62f-e928-4fae-b321-6d003187a279","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9777e62f-e928-4fae-b321-6d003187a279","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9777e62f-e928-4fae-b321-6d003187a279","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9777e62f-e928-4fae-b321-6d003187a279","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9777e62f-e928-4fae-b321-6d003187a279","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53712","PortSpecifier":{"PortValue":53712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53712","PortSpecifier":{"PortValue":53712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611377,"nanos":631644725},"http":{"id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cd5fb1a-ff7c-42c1-9219-71d967141aa2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62797765-bef9-4158-a418-f18e7a567874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53726","PortSpecifier":{"PortValue":53726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"62797765-bef9-4158-a418-f18e7a567874","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"62797765-bef9-4158-a418-f18e7a567874","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53726","PortSpecifier":{"PortValue":53726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611378,"nanos":666958916},"http":{"id":"62797765-bef9-4158-a418-f18e7a567874","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62797765-bef9-4158-a418-f18e7a567874","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"62797765-bef9-4158-a418-f18e7a567874","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"62797765-bef9-4158-a418-f18e7a567874","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"62797765-bef9-4158-a418-f18e7a567874","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62797765-bef9-4158-a418-f18e7a567874","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"62797765-bef9-4158-a418-f18e7a567874","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbca39ed-88da-4107-bd04-de028fb41900","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53738","PortSpecifier":{"PortValue":53738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bbca39ed-88da-4107-bd04-de028fb41900","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bbca39ed-88da-4107-bd04-de028fb41900","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:53738","PortSpecifier":{"PortValue":53738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611379,"nanos":710915348},"http":{"id":"bbca39ed-88da-4107-bd04-de028fb41900","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bbca39ed-88da-4107-bd04-de028fb41900","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bbca39ed-88da-4107-bd04-de028fb41900","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbca39ed-88da-4107-bd04-de028fb41900","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bbca39ed-88da-4107-bd04-de028fb41900","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57162","PortSpecifier":{"PortValue":57162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"53d2a762-9ab0-4e22-a382-826b49012c18","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57162","PortSpecifier":{"PortValue":57162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611380,"nanos":752420776},"http":{"id":"53d2a762-9ab0-4e22-a382-826b49012c18","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"53d2a762-9ab0-4e22-a382-826b49012c18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57166","PortSpecifier":{"PortValue":57166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57166","PortSpecifier":{"PortValue":57166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611381,"nanos":789109009},"http":{"id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1f7ed21a-afcf-4dca-a274-c5db7328454c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57180","PortSpecifier":{"PortValue":57180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57180","PortSpecifier":{"PortValue":57180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611382,"nanos":824531297},"http":{"id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e6fc6d-e806-4910-b028-9eb627ff8ff7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57194","PortSpecifier":{"PortValue":57194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57194","PortSpecifier":{"PortValue":57194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611383,"nanos":861611642},"http":{"id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8bb0046b-4cf3-4a3e-b643-36003f615c9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57206","PortSpecifier":{"PortValue":57206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57206","PortSpecifier":{"PortValue":57206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611384,"nanos":897514619},"http":{"id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbcffc3b-2d51-400b-8bd1-b522f1a98004","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7830b75e-1cfb-4521-8029-641c1d176767","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57216","PortSpecifier":{"PortValue":57216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7830b75e-1cfb-4521-8029-641c1d176767","method":"POST","path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions","host":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7830b75e-1cfb-4521-8029-641c1d176767","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:57216","PortSpecifier":{"PortValue":57216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611385,"nanos":930594825},"http":{"id":"7830b75e-1cfb-4521-8029-641c1d176767","method":"POST","headers":{":authority":"e2e-shared-a-bf561e.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XlPl7UqZUvfoQwvx_hgeifOqBV9dwBIIv4B945hJxhACwo6ngjjnL7b5GqDL\"}"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","subscription":"e2e-rate-iso-a-a8872e","tenant":"e2e-shared-a-bf561e","userId":"1462175f-75e5-4f57-9cc8-8286ce94a240","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bf561e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7830b75e-1cfb-4521-8029-641c1d176767","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7830b75e-1cfb-4521-8029-641c1d176767","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1462175f-75e5-4f57-9cc8-8286ce94a240","keyName":"e2e-rate-a-a8872e","selected_subscription":"e2e-rate-iso-a-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-a-bf561e/e2e-rate-iso-a-a8872e@ai-tenant-e2e-shared-a-bf561e/rate-test-model-bf561e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bf561e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8872e","namespace":"ai-tenant-e2e-shared-a-bf561e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7830b75e-1cfb-4521-8029-641c1d176767","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7830b75e-1cfb-4521-8029-641c1d176767","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:42316","PortSpecifier":{"PortValue":42316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","method":"POST","path":"/ai-tenant-e2e-shared-b-497419/rate-test-model-497419/v1/completions","host":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.8:42316","PortSpecifier":{"PortValue":42316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783611385,"nanos":965410118},"http":{"id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","method":"POST","headers":{":authority":"e2e-shared-b-497419.apps.816cbb1a-c3a9-4178-8da2-86e43f1f7dee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-497419/rate-test-model-497419/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ri4lXCjBI5K3BhLp_6NsXR3KfzPBjj1W1x2zFy0ZPA0kGZMLJmZNkGSCRKKO"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ri4lXCjBI5K3BhLp_6NsXR3KfzPBjj1W1x2zFy0ZPA0kGZMLJmZNkGSCRKKO\"}"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3d76a113-3c0a-42e7-b349-875e2da3c8ab","keyName":"e2e-rate-b-a8872e","subscription":"e2e-rate-iso-b-a8872e","tenant":"e2e-shared-b-497419","userId":"3d76a113-3c0a-42e7-b349-875e2da3c8ab","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-497419/rate-test-model-497419\",\"requestedSubscription\":\"e2e-rate-iso-b-a8872e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-497419.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-497419","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8872e","namespace":"ai-tenant-e2e-shared-b-497419","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-497419/rate-test-model-497419\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a8872e"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3d76a113-3c0a-42e7-b349-875e2da3c8ab","keyName":"e2e-rate-b-a8872e","selected_subscription":"e2e-rate-iso-b-a8872e","selected_subscription_key":"ai-tenant-e2e-shared-b-497419/e2e-rate-iso-b-a8872e@ai-tenant-e2e-shared-b-497419/rate-test-model-497419","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-497419","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8872e","namespace":"ai-tenant-e2e-shared-b-497419","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-09T15:36:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"462dbbc0-5927-4e50-a700-c7d55a93e8d4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-09T15:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/795fdb83fea48c1d43e15ceaedfbb230725adb7e498e6d8cf0f70c1cc216b1c9"}
{"level":"info","ts":"2026-07-09T15:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d7d657d71b0fc9cb2f5917b3127cb6115d20b7c1a197b432bbf6b75ae13a5c4"}
{"level":"info","ts":"2026-07-09T15:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14304f2900ac8905c677ee56cab3ef81b96f90e60071647e8f874f4b5ea85fe8"}
{"level":"info","ts":"2026-07-09T15:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96c117274f08d9e7e3ba0030a47aaea5d2c001b650f564acc423b44a972edc71"}
{"level":"info","ts":"2026-07-09T15:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2029432bfc4997fa122e3818da16e0a49c98392c7664ff1311671649ba28fb1e"}
{"level":"info","ts":"2026-07-09T15:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e555e8b920633f9e4449473cbb227183f87cea8ab777c3e2e34483afed38679a"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9cbfbe53ce2fd4a9b514c77832b2872c7b804af0ae596fc03b45723a152b7eda"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4afb2c3c2feb41dff707127a88ccdc366ca6f3fc55b3988b1ba567dc5ce5313a"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c300c052ac4fd6938cef110c4213f130c42defb7745fcf982a32c044d791fa6"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fb8f330cf2e87575566162355685096b3459bc5bea0d3b52e020c3b68908e8f"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c400f837bcabb582b18d87f3de003fbfe150bec7a6642d0f3923289f3384eea"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/12b645b9aad06e871b008c5fdf114cdb55b9d68aa58351eaa70aefd4c4586a11"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed220395ed279bad022bc5d8791c26dc8fa8bd57b7ab11c056ead3de2606e98"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7da18c45296d4e760ec3628f616fcb9bc835030fcfe46372b9bba4b6e4209bd6"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3a15a315e24d8d6624058b1341c21911264514849990c03a1506b63318027e6"}
{"level":"info","ts":"2026-07-09T15:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd2ef392fe6b93842a2ebd2a981c8252d36c7abf2a53385d8d78395500a95476"}
{"level":"info","ts":"2026-07-09T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6ae7d7572377d1195f819f319e9d3490e45b035fcd34cbced5dd0b544d017e9"}
{"level":"info","ts":"2026-07-09T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b26f03d1657cfdc3d80c3577d9920e2d2fdeb8be3c44a9e6a628daa932ed55df"}
{"level":"info","ts":"2026-07-09T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e6fc99fe7cc8411a3c02a2fe5b0ad77d3837b94bc64b178dd8885e76757487a"}
{"level":"info","ts":"2026-07-09T15:36:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bf36d6fa9c36237450129e3a000b1e89a39a305ce2d0f06b345196ab160711e"}