--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67"}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67"}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67"}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71"}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71"}
{"level":"error","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71"}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71"}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb"}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb"}
{"level":"info","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4"}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4"}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb"}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4"}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a"}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a"}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"error","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"debug","ts":"2026-07-06T19:45:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966"}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c"}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/908062e821af926f32d43a060b86f8662d7aa5db3f7b434f2d7edd2bc940d6ea"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"908062e821af926f32d43a060b86f8662d7aa5db3f7b434f2d7edd2bc940d6ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["908062e821af926f32d43a060b86f8662d7aa5db3f7b434f2d7edd2bc940d6ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"908062e821af926f32d43a060b86f8662d7aa5db3f7b434f2d7edd2bc940d6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"908062e821af926f32d43a060b86f8662d7aa5db3f7b434f2d7edd2bc940d6ea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/908062e821af926f32d43a060b86f8662d7aa5db3f7b434f2d7edd2bc940d6ea"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:45:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a"}
{"level":"info","ts":"2026-07-06T19:45:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16"}
{"level":"info","ts":"2026-07-06T19:45:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b"}
{"level":"info","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54450","PortSpecifier":{"PortValue":54450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63cb6278-8f46-4ce7-955d-96a2c591340d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54450","PortSpecifier":{"PortValue":54450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367112,"nanos":481703268},"http":{"id":"63cb6278-8f46-4ce7-955d-96a2c591340d","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63cb6278-8f46-4ce7-955d-96a2c591340d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34678","PortSpecifier":{"PortValue":34678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e751671d-e274-4c46-b31a-6c0893eb645a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34678","PortSpecifier":{"PortValue":34678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367112,"nanos":530039549},"http":{"id":"e751671d-e274-4c46-b31a-6c0893eb645a","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/auth-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e751671d-e274-4c46-b31a-6c0893eb645a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54466","PortSpecifier":{"PortValue":54466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ed87170-6460-4d00-ac97-5167c9821fb4","method":"GET","path":"/maas-api/v1/api-keys/92780bbe-cc93-4a91-b9c7-ca72f542b851","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54466","PortSpecifier":{"PortValue":54466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367112,"nanos":584098228},"http":{"id":"2ed87170-6460-4d00-ac97-5167c9821fb4","method":"GET","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/92780bbe-cc93-4a91-b9c7-ca72f542b851",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/92780bbe-cc93-4a91-b9c7-ca72f542b851",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ed87170-6460-4d00-ac97-5167c9821fb4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34684","PortSpecifier":{"PortValue":34684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51c103f9-4250-45f8-a8d9-420ef70725b6","method":"GET","path":"/maas-api/v1/api-keys/01823b65-791c-49bf-a855-b9d0a038240f","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34684","PortSpecifier":{"PortValue":34684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367112,"nanos":618477546},"http":{"id":"51c103f9-4250-45f8-a8d9-420ef70725b6","method":"GET","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/01823b65-791c-49bf-a855-b9d0a038240f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/01823b65-791c-49bf-a855-b9d0a038240f",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/auth-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:45:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51c103f9-4250-45f8-a8d9-420ef70725b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c584287-102b-43a9-87c7-104ce91751d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58464","PortSpecifier":{"PortValue":58464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c584287-102b-43a9-87c7-104ce91751d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c584287-102b-43a9-87c7-104ce91751d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58464","PortSpecifier":{"PortValue":58464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367132,"nanos":97429037},"http":{"id":"2c584287-102b-43a9-87c7-104ce91751d8","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c584287-102b-43a9-87c7-104ce91751d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c584287-102b-43a9-87c7-104ce91751d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c584287-102b-43a9-87c7-104ce91751d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c584287-102b-43a9-87c7-104ce91751d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c584287-102b-43a9-87c7-104ce91751d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c584287-102b-43a9-87c7-104ce91751d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c584287-102b-43a9-87c7-104ce91751d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c584287-102b-43a9-87c7-104ce91751d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c584287-102b-43a9-87c7-104ce91751d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c584287-102b-43a9-87c7-104ce91751d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c584287-102b-43a9-87c7-104ce91751d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58928","PortSpecifier":{"PortValue":58928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58928","PortSpecifier":{"PortValue":58928}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367132,"nanos":133780392},"http":{"id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/auth-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f92c96a5-cbed-4507-b5e7-a3cd7fd5419d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c75474fc-5761-497b-8083-28da2ea247e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58470","PortSpecifier":{"PortValue":58470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c75474fc-5761-497b-8083-28da2ea247e6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c75474fc-5761-497b-8083-28da2ea247e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58470","PortSpecifier":{"PortValue":58470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367132,"nanos":173841821},"http":{"id":"c75474fc-5761-497b-8083-28da2ea247e6","method":"GET","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OwIlwsRFKbJIZTew_3kJFgm3M80w3eBxLkDtMAfo8cygX9iqrrDClX6QMWeL"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OwIlwsRFKbJIZTew_3kJFgm3M80w3eBxLkDtMAfo8cygX9iqrrDClX6QMWeL\"}"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c6f4debd-7e18-4822-af0c-1de8e92556ce","keyName":"e2e-auth-iso-a-336686","subscription":"e2e-auth-iso-e058a6","tenant":"e2e-shared-a-5c92ad","userId":"c6f4debd-7e18-4822-af0c-1de8e92556ce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c75474fc-5761-497b-8083-28da2ea247e6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c75474fc-5761-497b-8083-28da2ea247e6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e058a6"}
{"level":"info","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c75474fc-5761-497b-8083-28da2ea247e6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:45:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c75474fc-5761-497b-8083-28da2ea247e6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48370","PortSpecifier":{"PortValue":48370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48370","PortSpecifier":{"PortValue":48370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367149,"nanos":508905470},"http":{"id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b67511a-7dfa-4b01-a1fe-f8cced6fad70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40988","PortSpecifier":{"PortValue":40988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"032764a0-34fb-444e-826b-7dc2c0345e14","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40988","PortSpecifier":{"PortValue":40988}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367149,"nanos":543832661},"http":{"id":"032764a0-34fb-444e-826b-7dc2c0345e14","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/auth-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"032764a0-34fb-444e-826b-7dc2c0345e14","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc131163-6247-48bf-9370-1403c123a254","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41000","PortSpecifier":{"PortValue":41000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc131163-6247-48bf-9370-1403c123a254","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc131163-6247-48bf-9370-1403c123a254","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41000","PortSpecifier":{"PortValue":41000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367149,"nanos":576638843},"http":{"id":"fc131163-6247-48bf-9370-1403c123a254","method":"GET","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc131163-6247-48bf-9370-1403c123a254","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rfUYoebHmXeV5KGe_NBEdXUqB9YQiH8vzHC8V7NQmd5RPE3sRux2srTwfMcm"}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc131163-6247-48bf-9370-1403c123a254","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rfUYoebHmXeV5KGe_NBEdXUqB9YQiH8vzHC8V7NQmd5RPE3sRux2srTwfMcm\"}"}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc131163-6247-48bf-9370-1403c123a254","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc131163-6247-48bf-9370-1403c123a254","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc131163-6247-48bf-9370-1403c123a254","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"fc131163-6247-48bf-9370-1403c123a254","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc131163-6247-48bf-9370-1403c123a254","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T19:45:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc131163-6247-48bf-9370-1403c123a254","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74975f90-65c5-48b2-aa89-7b1347670992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41414","PortSpecifier":{"PortValue":41414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74975f90-65c5-48b2-aa89-7b1347670992","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74975f90-65c5-48b2-aa89-7b1347670992","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41414","PortSpecifier":{"PortValue":41414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367166,"nanos":837151847},"http":{"id":"74975f90-65c5-48b2-aa89-7b1347670992","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"74975f90-65c5-48b2-aa89-7b1347670992","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74975f90-65c5-48b2-aa89-7b1347670992","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74975f90-65c5-48b2-aa89-7b1347670992","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74975f90-65c5-48b2-aa89-7b1347670992","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74975f90-65c5-48b2-aa89-7b1347670992","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74975f90-65c5-48b2-aa89-7b1347670992","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74975f90-65c5-48b2-aa89-7b1347670992","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74975f90-65c5-48b2-aa89-7b1347670992","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74975f90-65c5-48b2-aa89-7b1347670992","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74975f90-65c5-48b2-aa89-7b1347670992","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74975f90-65c5-48b2-aa89-7b1347670992","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37322","PortSpecifier":{"PortValue":37322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37322","PortSpecifier":{"PortValue":37322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367166,"nanos":875564966},"http":{"id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/auth-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc5e2083-bb8a-4e36-a787-9c627b8731a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41424","PortSpecifier":{"PortValue":41424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41424","PortSpecifier":{"PortValue":41424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367166,"nanos":906712835},"http":{"id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e319ad59-4f4a-4901-8646-66e97afdc3a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37332","PortSpecifier":{"PortValue":37332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37332","PortSpecifier":{"PortValue":37332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367166,"nanos":939792987},"http":{"id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/auth-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1e6d4cb-3da0-406f-bcd4-3bd769b7816a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41270","PortSpecifier":{"PortValue":41270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41270","PortSpecifier":{"PortValue":41270}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367186,"nanos":270026046},"http":{"id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c99fe5d9-cd6e-4b36-a6f3-0a06c18ef047","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44006","PortSpecifier":{"PortValue":44006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b692ccce-0072-49b0-a071-0e3c231b02e0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44006","PortSpecifier":{"PortValue":44006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367186,"nanos":303600367},"http":{"id":"b692ccce-0072-49b0-a071-0e3c231b02e0","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/auth-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b692ccce-0072-49b0-a071-0e3c231b02e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44012","PortSpecifier":{"PortValue":44012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7d67427-a184-4ade-a001-714559b7a7f7","method":"GET","path":"/maas-api/v1/api-keys/ba24df0e-32b3-4556-aff5-df2e2c03404d","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44012","PortSpecifier":{"PortValue":44012}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367186,"nanos":341319139},"http":{"id":"f7d67427-a184-4ade-a001-714559b7a7f7","method":"GET","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ba24df0e-32b3-4556-aff5-df2e2c03404d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ba24df0e-32b3-4556-aff5-df2e2c03404d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/auth-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7d67427-a184-4ade-a001-714559b7a7f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41272","PortSpecifier":{"PortValue":41272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","method":"GET","path":"/maas-api/v1/api-keys/ba24df0e-32b3-4556-aff5-df2e2c03404d","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41272","PortSpecifier":{"PortValue":41272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367186,"nanos":371335984},"http":{"id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","method":"GET","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ba24df0e-32b3-4556-aff5-df2e2c03404d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ba24df0e-32b3-4556-aff5-df2e2c03404d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"61a55ef5-8d74-4a6d-a05c-dd899943d9d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56320","PortSpecifier":{"PortValue":56320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56320","PortSpecifier":{"PortValue":56320}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367204,"nanos":540847862},"http":{"id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f176f395-d3da-4e0d-aaaa-e6478ef76b6f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34732","PortSpecifier":{"PortValue":34732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34732","PortSpecifier":{"PortValue":34732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367204,"nanos":575185244},"http":{"id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/auth-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e13464ae-c61f-4055-8fe0-ce9fde10c3cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56336","PortSpecifier":{"PortValue":56336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56336","PortSpecifier":{"PortValue":56336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367204,"nanos":611100978},"http":{"id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-n0R0Pi553oXjUs1V_oP856UyBJRb8B4Qq4M2V9Jc7dY2gfJMIjHpo8nDoSCt"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-n0R0Pi553oXjUs1V_oP856UyBJRb8B4Qq4M2V9Jc7dY2gfJMIjHpo8nDoSCt\"}"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c8d89ebc-4ee5-4eb8-b1f5-407198f9d14f","keyName":"e2e-auth-iso-a-0d49a9","subscription":"e2e-auth-iso-8226fd","tenant":"e2e-shared-a-5c92ad","userId":"c8d89ebc-4ee5-4eb8-b1f5-407198f9d14f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/auth-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8226fd"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:46:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f9615c3-e00a-4303-9afd-cec57637f5ec","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88a1b3a3b37f067b3a45c558ad1d419bb3c864ed525d028457fb25b3978a005a"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70ea1e2d8bb1d66929cfc3ace81b89a3a94a774299dc8b11d17b5f2fc7343989"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8bfa56330ea79a0687640ac3b67fb11b4dc381bb92ae01a402c0dbb0025c71ef"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aff45c39d4bcdbb25bafd6f0d326311381186c027b4e08ee9b1a26732590f99a"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b128ffb9e842ae4025633827febd80b5d5cb81bfd636f856e7b95db5cbc93e4c"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7499fd4f6140a21ad53dc307a7be9285caade82659e3ce96cbe94ad4864d1e25"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7cb6b9c737469800d977fd69e2d46669d7b69dbbde9f7afade4075235e25eb71"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/99f4d32da115919c29de28c836e8568b68d2a8d4a5605e9dd4570ae9bc636f16"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50fef05cf52408fedd2492e6bf3105456d80bd400f8f9246d77dd51b6ab62966"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e07e627355919c23595fea133f7f14482053fcc3c070068b4d3ea979708253b"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f88c9c99c211c0ec513ca70d7e3a5160063ad19199ef53a1a0a4da7d6435ab67"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ea17034c3bc3464300bc04f9669aecfd0e4d68b71652362ee616b87c02ecebe"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/908062e821af926f32d43a060b86f8662d7aa5db3f7b434f2d7edd2bc940d6ea"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/060829df67eb8ae04c240b86cc8cca384673071a3d22903fef441ffe45a3add9"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66a001e0d7faea02be99c178784b3faa450996c275b562821a51035e88d286cb"}
{"level":"info","ts":"2026-07-06T19:46:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cfb4411a21fe1594a4e818973f4367d15c3974f01ccf8c5a182500f62dcdbbb4"}
{"level":"debug","ts":"2026-07-06T19:47:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314"}
{"level":"info","ts":"2026-07-06T19:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314"}
{"level":"info","ts":"2026-07-06T19:47:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2"}
{"level":"info","ts":"2026-07-06T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758"}
{"level":"info","ts":"2026-07-06T19:47:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2"}
{"level":"info","ts":"2026-07-06T19:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/994619a161c06194364441783c28b7228b70a11abe33c749faeac76fd0b6f22c"}
{"level":"info","ts":"2026-07-06T19:47:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314"}
{"level":"info","ts":"2026-07-06T19:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758"}
{"level":"info","ts":"2026-07-06T19:47:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e4f3004ee8b94ad77557df8ceea2a4513087242ee1e60041cf865d2d6be431"}
{"level":"info","ts":"2026-07-06T19:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"994619a161c06194364441783c28b7228b70a11abe33c749faeac76fd0b6f22c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["994619a161c06194364441783c28b7228b70a11abe33c749faeac76fd0b6f22c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2"}
{"level":"info","ts":"2026-07-06T19:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee67f5e2b6ce6f5bc031ca8700f68342588b5d193fe1c47852311ff0c0ace1da"}
{"level":"info","ts":"2026-07-06T19:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"994619a161c06194364441783c28b7228b70a11abe33c749faeac76fd0b6f22c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84e4f3004ee8b94ad77557df8ceea2a4513087242ee1e60041cf865d2d6be431","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84e4f3004ee8b94ad77557df8ceea2a4513087242ee1e60041cf865d2d6be431"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/994619a161c06194364441783c28b7228b70a11abe33c749faeac76fd0b6f22c"}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84e4f3004ee8b94ad77557df8ceea2a4513087242ee1e60041cf865d2d6be431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee67f5e2b6ce6f5bc031ca8700f68342588b5d193fe1c47852311ff0c0ace1da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee67f5e2b6ce6f5bc031ca8700f68342588b5d193fe1c47852311ff0c0ace1da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2995feb0b1c14adaa63f3957138b14769aaa9bc71dda23f3c46b081a245e1c9f"}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e4f3004ee8b94ad77557df8ceea2a4513087242ee1e60041cf865d2d6be431"}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee67f5e2b6ce6f5bc031ca8700f68342588b5d193fe1c47852311ff0c0ace1da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"994619a161c06194364441783c28b7228b70a11abe33c749faeac76fd0b6f22c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2995feb0b1c14adaa63f3957138b14769aaa9bc71dda23f3c46b081a245e1c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2995feb0b1c14adaa63f3957138b14769aaa9bc71dda23f3c46b081a245e1c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee67f5e2b6ce6f5bc031ca8700f68342588b5d193fe1c47852311ff0c0ace1da"}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2995feb0b1c14adaa63f3957138b14769aaa9bc71dda23f3c46b081a245e1c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e4f3004ee8b94ad77557df8ceea2a4513087242ee1e60041cf865d2d6be431","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee67f5e2b6ce6f5bc031ca8700f68342588b5d193fe1c47852311ff0c0ace1da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2995feb0b1c14adaa63f3957138b14769aaa9bc71dda23f3c46b081a245e1c9f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2995feb0b1c14adaa63f3957138b14769aaa9bc71dda23f3c46b081a245e1c9f"}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"}
{"level":"debug","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"}
{"level":"debug","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"}
{"level":"debug","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"}
{"level":"debug","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"debug","ts":"2026-07-06T19:47:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437"}
{"level":"error","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"error","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"debug","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:47:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:47:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"info","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"debug","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:47:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:47:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:47:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758"}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2995feb0b1c14adaa63f3957138b14769aaa9bc71dda23f3c46b081a245e1c9f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2995feb0b1c14adaa63f3957138b14769aaa9bc71dda23f3c46b081a245e1c9f"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"994619a161c06194364441783c28b7228b70a11abe33c749faeac76fd0b6f22c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/994619a161c06194364441783c28b7228b70a11abe33c749faeac76fd0b6f22c"}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84e4f3004ee8b94ad77557df8ceea2a4513087242ee1e60041cf865d2d6be431","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee67f5e2b6ce6f5bc031ca8700f68342588b5d193fe1c47852311ff0c0ace1da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3"}
{"level":"debug","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84e4f3004ee8b94ad77557df8ceea2a4513087242ee1e60041cf865d2d6be431"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee67f5e2b6ce6f5bc031ca8700f68342588b5d193fe1c47852311ff0c0ace1da"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"info","ts":"2026-07-06T19:48:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314"}
{"level":"info","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c566f38-9297-4095-b3ba-29d73397db93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58028","PortSpecifier":{"PortValue":58028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c566f38-9297-4095-b3ba-29d73397db93","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c566f38-9297-4095-b3ba-29d73397db93","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58028","PortSpecifier":{"PortValue":58028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367290,"nanos":527990585},"http":{"id":"0c566f38-9297-4095-b3ba-29d73397db93","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c566f38-9297-4095-b3ba-29d73397db93","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c566f38-9297-4095-b3ba-29d73397db93","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c566f38-9297-4095-b3ba-29d73397db93","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c566f38-9297-4095-b3ba-29d73397db93","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c566f38-9297-4095-b3ba-29d73397db93","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c566f38-9297-4095-b3ba-29d73397db93","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/sub-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c566f38-9297-4095-b3ba-29d73397db93","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c566f38-9297-4095-b3ba-29d73397db93","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c566f38-9297-4095-b3ba-29d73397db93","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c566f38-9297-4095-b3ba-29d73397db93","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c566f38-9297-4095-b3ba-29d73397db93","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45778","PortSpecifier":{"PortValue":45778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45778","PortSpecifier":{"PortValue":45778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367290,"nanos":565316473},"http":{"id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/sub-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fba11f5-ed3b-4b74-b844-4f6ce7948d53","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58030","PortSpecifier":{"PortValue":58030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58030","PortSpecifier":{"PortValue":58030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367290,"nanos":600940102},"http":{"id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","method":"GET","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cuWzsCKoKdD6AL4D_896FmjsTTCHjnquRACrwk8RpvVzkNqITr0uNYJpo6rN"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cuWzsCKoKdD6AL4D_896FmjsTTCHjnquRACrwk8RpvVzkNqITr0uNYJpo6rN\"}"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b1a90a2-177d-4be5-bb0d-ff8589e27824","keyName":"e2e-sub-iso-7d6d11","subscription":"e2e-a-only-e9dfd9","tenant":"e2e-shared-a-5c92ad","userId":"2b1a90a2-177d-4be5-bb0d-ff8589e27824","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/sub-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e9dfd9"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8bee6e0-0f18-4c36-8ebf-c358ecb0993b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45784","PortSpecifier":{"PortValue":45784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45784","PortSpecifier":{"PortValue":45784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367290,"nanos":636795156},"http":{"id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","method":"GET","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-fdfTcH1aQFPQMYms_BlFiAUXOewt9wdQrqYXMx2vF2swlRgemoG2pf8mlcTR"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-fdfTcH1aQFPQMYms_BlFiAUXOewt9wdQrqYXMx2vF2swlRgemoG2pf8mlcTR\"}"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2d483c3e-050c-486f-884a-f202b6999875","keyName":"e2e-sub-iso-6eb0e0","subscription":"e2e-b-only-e9dfd9","tenant":"e2e-shared-b-5f29b8","userId":"2d483c3e-050c-486f-884a-f202b6999875","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/sub-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e9dfd9"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:48:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"471fe62d-5f6c-40d5-88f8-e6e698005ad5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55050","PortSpecifier":{"PortValue":55050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2194b023-509f-42ae-a2a4-3d35632f8575","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55050","PortSpecifier":{"PortValue":55050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367300,"nanos":692320418},"http":{"id":"2194b023-509f-42ae-a2a4-3d35632f8575","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/sub-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2194b023-509f-42ae-a2a4-3d35632f8575","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57630","PortSpecifier":{"PortValue":57630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57630","PortSpecifier":{"PortValue":57630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367300,"nanos":725378903},"http":{"id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/sub-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d99e1f2-3c99-4ce9-8dc7-638700f33dbf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55058","PortSpecifier":{"PortValue":55058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec3468b3-8358-4504-a857-05b9414fb7b8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55058","PortSpecifier":{"PortValue":55058}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367300,"nanos":759087211},"http":{"id":"ec3468b3-8358-4504-a857-05b9414fb7b8","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YDloU5oMFRFpqdzk_Q7cnZjhzWoozuTyTrySSTMCISQlGs51FxhZ5cPhP851"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YDloU5oMFRFpqdzk_Q7cnZjhzWoozuTyTrySSTMCISQlGs51FxhZ5cPhP851\"}"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e86941c8-1a8e-4ad2-a872-e1265e208c51","keyName":"e2e-sub-iso-529889","subscription":"e2e-shared-sub-12119a","tenant":"e2e-shared-a-5c92ad","userId":"e86941c8-1a8e-4ad2-a872-e1265e208c51","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/sub-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-12119a"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec3468b3-8358-4504-a857-05b9414fb7b8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582d8250-b5a7-4d19-b051-830577dd7896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57640","PortSpecifier":{"PortValue":57640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"582d8250-b5a7-4d19-b051-830577dd7896","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582d8250-b5a7-4d19-b051-830577dd7896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57640","PortSpecifier":{"PortValue":57640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367300,"nanos":790853911},"http":{"id":"582d8250-b5a7-4d19-b051-830577dd7896","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-188M3icNwQq4mTFmN_nx3P6fRDNYuSMKYNhfi1imwvDL5S8h1sXjcFLVsmPuW"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-188M3icNwQq4mTFmN_nx3P6fRDNYuSMKYNhfi1imwvDL5S8h1sXjcFLVsmPuW\"}"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b475aca5-1e3b-4903-93e3-20af356b7c03","keyName":"e2e-sub-iso-893291","subscription":"e2e-shared-sub-12119a","tenant":"e2e-shared-b-5f29b8","userId":"b475aca5-1e3b-4903-93e3-20af356b7c03","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"582d8250-b5a7-4d19-b051-830577dd7896","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/sub-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582d8250-b5a7-4d19-b051-830577dd7896","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-12119a"}
{"level":"info","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582d8250-b5a7-4d19-b051-830577dd7896","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:48:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582d8250-b5a7-4d19-b051-830577dd7896","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:48:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/973173e31d7aa94eab73e5ce57973c99dd9c3b04a92cf0776d952849860aacc8"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/178f5a1e927a256b6c7d9cca552f7a8053a9581aea18c97fddaa5337dd776075"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edf78c1dd619122a0f3da54ce094a4de38b141a9af5f2c5ec9f1af9c73fa4314"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/643b78882d58348b188049407831fd34a7e0162389de6986dd6453a28bb86437"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee67f5e2b6ce6f5bc031ca8700f68342588b5d193fe1c47852311ff0c0ace1da"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84e4f3004ee8b94ad77557df8ceea2a4513087242ee1e60041cf865d2d6be431"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d38d4482c9527c92ab5fbd4307d5097314a12a34a26cd3f37a3801fe01ddea3"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d46c59f8e125a31473fbb7e6344e379127fb54b936be6ad550d6b6e106fd3d4"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/298f804f45988b3482885ccfa22f3bcd165a7e5eeee8e143e5baafbd19d5f758"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/994619a161c06194364441783c28b7228b70a11abe33c749faeac76fd0b6f22c"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e5220f3f524d3c244a1343c36c230394fe728eb047b625ddfa647fee960e229"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fb331d421bdd6a678be78c39851db9257ddf1f047ec383770ac2f7cf988e888"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2995feb0b1c14adaa63f3957138b14769aaa9bc71dda23f3c46b081a245e1c9f"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa0b2764f9b7735a26044492616051bcdaacc9b4d8ccf8c267b20c422faad48d"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c15a38a014e3b20d5fb8036c7caf4e9e5d194c0ec84c9fee6369d322bfb49be2"}
{"level":"info","ts":"2026-07-06T19:48:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64a350e1a61d70aff4e711ea651f91c959745e95107ed021632daab92fe05407"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987"}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987"}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c5c9e4fa50c8661cb0f2e173115e98c202bbfd1de22c6f3c518e2ab15c9dddb"}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c5c9e4fa50c8661cb0f2e173115e98c202bbfd1de22c6f3c518e2ab15c9dddb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c5c9e4fa50c8661cb0f2e173115e98c202bbfd1de22c6f3c518e2ab15c9dddb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987"}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c5c9e4fa50c8661cb0f2e173115e98c202bbfd1de22c6f3c518e2ab15c9dddb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c5c9e4fa50c8661cb0f2e173115e98c202bbfd1de22c6f3c518e2ab15c9dddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c5c9e4fa50c8661cb0f2e173115e98c202bbfd1de22c6f3c518e2ab15c9dddb"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"error","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"}
{"level":"error","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"error","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:48:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"}
{"level":"info","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:48:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:48:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"info","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:48:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:48:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:48:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"debug","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"debug","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"debug","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"error","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853"}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853"}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016"}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af"}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa"}
{"level":"info","ts":"2026-07-06T19:49:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af"}
{"level":"debug","ts":"2026-07-06T19:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"}
{"level":"debug","ts":"2026-07-06T19:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"}
{"level":"debug","ts":"2026-07-06T19:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512"}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"info","ts":"2026-07-06T19:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987"}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T19:49:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T19:49:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T19:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T19:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c5c9e4fa50c8661cb0f2e173115e98c202bbfd1de22c6f3c518e2ab15c9dddb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"}
{"level":"debug","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9"}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa"}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c5c9e4fa50c8661cb0f2e173115e98c202bbfd1de22c6f3c518e2ab15c9dddb"}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af"}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"}
{"level":"info","ts":"2026-07-06T19:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}
{"level":"info","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40110","PortSpecifier":{"PortValue":40110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40110","PortSpecifier":{"PortValue":40110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367389,"nanos":983841818},"http":{"id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:49:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f773be3e-76cd-4b69-9dd2-c457f3b676c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8429e06d-31d8-4724-8d89-846ed7871935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42604","PortSpecifier":{"PortValue":42604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8429e06d-31d8-4724-8d89-846ed7871935","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8429e06d-31d8-4724-8d89-846ed7871935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42604","PortSpecifier":{"PortValue":42604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367390,"nanos":25485690},"http":{"id":"8429e06d-31d8-4724-8d89-846ed7871935","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8429e06d-31d8-4724-8d89-846ed7871935","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8429e06d-31d8-4724-8d89-846ed7871935","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8429e06d-31d8-4724-8d89-846ed7871935","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8429e06d-31d8-4724-8d89-846ed7871935","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8429e06d-31d8-4724-8d89-846ed7871935","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8429e06d-31d8-4724-8d89-846ed7871935","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/rate-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8429e06d-31d8-4724-8d89-846ed7871935","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8429e06d-31d8-4724-8d89-846ed7871935","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8429e06d-31d8-4724-8d89-846ed7871935","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8429e06d-31d8-4724-8d89-846ed7871935","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8429e06d-31d8-4724-8d89-846ed7871935","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a722d20-743f-4996-866d-394b130adc80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40122","PortSpecifier":{"PortValue":40122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a722d20-743f-4996-866d-394b130adc80","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a722d20-743f-4996-866d-394b130adc80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40122","PortSpecifier":{"PortValue":40122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367390,"nanos":62104267},"http":{"id":"0a722d20-743f-4996-866d-394b130adc80","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bO3bpJBxr2GwfEiR_6CFwti5aer9FY71dRGLVYIpRMzIDMvXmxlyInaGqDnn"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a722d20-743f-4996-866d-394b130adc80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bO3bpJBxr2GwfEiR_6CFwti5aer9FY71dRGLVYIpRMzIDMvXmxlyInaGqDnn\"}"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13879714-34b7-4890-bab7-b8c6e4df7d74","keyName":"e2e-rate-a-299cb8","subscription":"e2e-rate-iso-a-299cb8","tenant":"e2e-shared-a-5c92ad","userId":"13879714-34b7-4890-bab7-b8c6e4df7d74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a722d20-743f-4996-866d-394b130adc80","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-299cb8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-299cb8","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a722d20-743f-4996-866d-394b130adc80","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-299cb8"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a722d20-743f-4996-866d-394b130adc80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"13879714-34b7-4890-bab7-b8c6e4df7d74","keyName":"e2e-rate-a-299cb8","selected_subscription":"e2e-rate-iso-a-299cb8","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-299cb8@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-299cb8","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a722d20-743f-4996-866d-394b130adc80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:49:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a722d20-743f-4996-866d-394b130adc80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40126","PortSpecifier":{"PortValue":40126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdb2d85e-8435-4490-a830-c5908a9996a8","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40126","PortSpecifier":{"PortValue":40126}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367391,"nanos":120936039},"http":{"id":"bdb2d85e-8435-4490-a830-c5908a9996a8","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bO3bpJBxr2GwfEiR_6CFwti5aer9FY71dRGLVYIpRMzIDMvXmxlyInaGqDnn"}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bO3bpJBxr2GwfEiR_6CFwti5aer9FY71dRGLVYIpRMzIDMvXmxlyInaGqDnn\"}"}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13879714-34b7-4890-bab7-b8c6e4df7d74","keyName":"e2e-rate-a-299cb8","subscription":"e2e-rate-iso-a-299cb8","tenant":"e2e-shared-a-5c92ad","userId":"13879714-34b7-4890-bab7-b8c6e4df7d74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-299cb8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-299cb8","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-299cb8"}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"13879714-34b7-4890-bab7-b8c6e4df7d74","keyName":"e2e-rate-a-299cb8","selected_subscription":"e2e-rate-iso-a-299cb8","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-299cb8@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-299cb8","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:49:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb2d85e-8435-4490-a830-c5908a9996a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40128","PortSpecifier":{"PortValue":40128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f870e03e-40e3-49de-a4e7-52fcafca5562","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40128","PortSpecifier":{"PortValue":40128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367392,"nanos":153582735},"http":{"id":"f870e03e-40e3-49de-a4e7-52fcafca5562","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1bO3bpJBxr2GwfEiR_6CFwti5aer9FY71dRGLVYIpRMzIDMvXmxlyInaGqDnn"}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1bO3bpJBxr2GwfEiR_6CFwti5aer9FY71dRGLVYIpRMzIDMvXmxlyInaGqDnn\"}"}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"13879714-34b7-4890-bab7-b8c6e4df7d74","keyName":"e2e-rate-a-299cb8","subscription":"e2e-rate-iso-a-299cb8","tenant":"e2e-shared-a-5c92ad","userId":"13879714-34b7-4890-bab7-b8c6e4df7d74","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-299cb8\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-299cb8","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-299cb8"}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"13879714-34b7-4890-bab7-b8c6e4df7d74","keyName":"e2e-rate-a-299cb8","selected_subscription":"e2e-rate-iso-a-299cb8","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-299cb8@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-299cb8","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:49:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f870e03e-40e3-49de-a4e7-52fcafca5562","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50424","PortSpecifier":{"PortValue":50424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46341b09-e964-4bb3-8758-89ebed3b11d5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50424","PortSpecifier":{"PortValue":50424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367398,"nanos":766111356},"http":{"id":"46341b09-e964-4bb3-8758-89ebed3b11d5","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.57:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46341b09-e964-4bb3-8758-89ebed3b11d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44050","PortSpecifier":{"PortValue":44050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44050","PortSpecifier":{"PortValue":44050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367398,"nanos":807814364},"http":{"id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"]}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e305d9418cee"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8fedf5fc-869c-4a73-b2bd-7c3b304bf8ad"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e4e5792c-4d8c-417d-b2a9-857f876f8eeb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/rate-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ed4bf4d-de0e-4912-ae3f-272972b03d6d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50430","PortSpecifier":{"PortValue":50430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50430","PortSpecifier":{"PortValue":50430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367398,"nanos":841464371},"http":{"id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:49:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"929b7f0f-54bf-4403-b2c2-819fa774eaa5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50438","PortSpecifier":{"PortValue":50438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50438","PortSpecifier":{"PortValue":50438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367399,"nanos":870959984},"http":{"id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:49:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"63fb36a4-89ff-4920-9ba5-f49f5fcd5e9c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50450","PortSpecifier":{"PortValue":50450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50450","PortSpecifier":{"PortValue":50450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367400,"nanos":903160719},"http":{"id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c82b53dd-8287-4edb-ab93-d9b65067cd77","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50452","PortSpecifier":{"PortValue":50452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6cf61798-68dc-4f02-b577-4b0586538fca","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50452","PortSpecifier":{"PortValue":50452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367401,"nanos":944904564},"http":{"id":"6cf61798-68dc-4f02-b577-4b0586538fca","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6cf61798-68dc-4f02-b577-4b0586538fca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50456","PortSpecifier":{"PortValue":50456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"876e3291-73c0-4111-82d4-69f8b49df7c9","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50456","PortSpecifier":{"PortValue":50456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367403,"nanos":8815905},"http":{"id":"876e3291-73c0-4111-82d4-69f8b49df7c9","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"876e3291-73c0-4111-82d4-69f8b49df7c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50460","PortSpecifier":{"PortValue":50460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50460","PortSpecifier":{"PortValue":50460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367404,"nanos":50172112},"http":{"id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b5e6f23-88ea-4a89-9604-ffcee0ccff2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50474","PortSpecifier":{"PortValue":50474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50474","PortSpecifier":{"PortValue":50474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367405,"nanos":81910197},"http":{"id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c60d1c09-a4a4-4001-ad15-9b10a2d657b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32916","PortSpecifier":{"PortValue":32916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32916","PortSpecifier":{"PortValue":32916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367406,"nanos":118192035},"http":{"id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d1cf9b3-3f07-44aa-877a-84c0e0dc95af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32924","PortSpecifier":{"PortValue":32924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32924","PortSpecifier":{"PortValue":32924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367407,"nanos":152535191},"http":{"id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"57a4791f-2dc5-4758-b93f-9e22f0d7d93d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32926","PortSpecifier":{"PortValue":32926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32926","PortSpecifier":{"PortValue":32926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367408,"nanos":185326747},"http":{"id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"08ff568d-1937-4ce5-870c-cbd90f881ed3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32930","PortSpecifier":{"PortValue":32930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","method":"POST","path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions","host":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:32930","PortSpecifier":{"PortValue":32930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.57:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367409,"nanos":219801918},"http":{"id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","method":"POST","headers":{":authority":"e2e-shared-a-5c92ad.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IPm5stXCufLhLNOY_4Bp8jymW2H5iBv56ztQtHKtuqSLcHpOSKx4WPkeNJ0H\"}"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","subscription":"e2e-rate-iso-a-ac0f77","tenant":"e2e-shared-a-5c92ad","userId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\",\"requestedSubscription\":\"e2e-rate-iso-a-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5c92ad.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"868784d8-87ea-49e9-9260-0b1410b7b9ec","keyName":"e2e-rate-a-ac0f77","selected_subscription":"e2e-rate-iso-a-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-a-5c92ad/e2e-rate-iso-a-ac0f77@ai-tenant-e2e-shared-a-5c92ad/rate-test-model-5c92ad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5c92ad","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ac0f77","namespace":"ai-tenant-e2e-shared-a-5c92ad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b77ea1d-6dbe-4017-8a62-66d37b7caf5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39556","PortSpecifier":{"PortValue":39556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","method":"POST","path":"/ai-tenant-e2e-shared-b-5f29b8/rate-test-model-5f29b8/v1/completions","host":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39556","PortSpecifier":{"PortValue":39556}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783367409,"nanos":252885751},"http":{"id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","method":"POST","headers":{":authority":"e2e-shared-b-5f29b8.apps.ed6006ff-308f-4519-b84f-e305d9418cee.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-5f29b8/rate-test-model-5f29b8/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ECO4NS1sx4aWTSFE_AW7uoGevwhXb9CzMWJOe2UAguYCUNBAM15TolUhXicn"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ECO4NS1sx4aWTSFE_AW7uoGevwhXb9CzMWJOe2UAguYCUNBAM15TolUhXicn\"}"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2eb2e885-d514-4775-92d8-6462b552cc83","keyName":"e2e-rate-b-ac0f77","subscription":"e2e-rate-iso-b-ac0f77","tenant":"e2e-shared-b-5f29b8","userId":"2eb2e885-d514-4775-92d8-6462b552cc83","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-5f29b8/rate-test-model-5f29b8\",\"requestedSubscription\":\"e2e-rate-iso-b-ac0f77\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-5f29b8.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f29b8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ac0f77","namespace":"ai-tenant-e2e-shared-b-5f29b8","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-5f29b8/rate-test-model-5f29b8\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-ac0f77"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2eb2e885-d514-4775-92d8-6462b552cc83","keyName":"e2e-rate-b-ac0f77","selected_subscription":"e2e-rate-iso-b-ac0f77","selected_subscription_key":"ai-tenant-e2e-shared-b-5f29b8/e2e-rate-iso-b-ac0f77@ai-tenant-e2e-shared-b-5f29b8/rate-test-model-5f29b8","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f29b8","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-ac0f77","namespace":"ai-tenant-e2e-shared-b-5f29b8","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T19:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d8fd8cd3-3bbb-48cf-b5ac-446cd1e6a3d0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T19:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c365c3d9a7980630c9083c5dc08703bd99785c7155915fd8db92431277ed9512"}
{"level":"info","ts":"2026-07-06T19:50:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cabcfd6a15beec0824b3cd01642f70f9e07fbfa40eef03d3f7727b2c76782ea1"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2668715d78393fb0ee754250c37d7081631dafabf4dece9db508e1f8297133af"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ff6fecce76e8332a1a04ac88654458100199a11cc2c9ed9915aeabc27da476a"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ff98491f198b5f467b1debc1b1636888f5de6257a71ba560c8a0e4cd85b5bfa"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1abb5c385212313ea35df44e0ce273540a15c31397f9189fed9aa9342896be9"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9bb4d1e1800b339ed05edd79cb5704d94bcee43d5427ecce050ce7e380d36b2"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd2fe6801aba5bd5aae0ba4297b6e58c1c98b407db4e372040f2acbda32eaa42"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1101112b977ccf76c222970c296baf511efad253f2569ee4cc314de8e16b853"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52658dd5fc2c327e1e4fe7c0c5e3e7caf11950258e3e56c881257cc8467cfef0"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddde2515fc690f87930d9d79f7cb4fa4867c5ae04bd8cdb2ea55d9c4b9ee65cc"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c5c9e4fa50c8661cb0f2e173115e98c202bbfd1de22c6f3c518e2ab15c9dddb"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df06657c3e5f45f05d36a5a33f161b6786233f06a4869b0650a2ced94e71b07b"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f491cb5bbc137bc21b70f0e384f7a5deadea97d54731592581e27b9b267a46ec"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2d577288c57fd19d06ca6eada6bc2e6b58f59ea76f3470fe526a5f420d07987"}
{"level":"info","ts":"2026-07-06T19:50:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b719aefb0e634abddadf32b9c495b9f15f5894ecde38a2feffd0bd0f4144016"}
{"level":"info","ts":"2026-07-06T19:50:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edee7110ea8a89df5f4b02da22579912199045f81b2d5562018522ac43ec1a2b"}
{"level":"info","ts":"2026-07-06T19:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8120aab7de01a4ecc5198bf575949cc6e9806f4176c2d2757bf3361113830cfd"}
{"level":"info","ts":"2026-07-06T19:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2431f64af2d2d5cb3b519eed5505b2a814ba8d60a8cc6ed41b96863aa22d6d6c"}
{"level":"info","ts":"2026-07-06T19:50:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4fe118ce81b8c34ddbb09f04a94961e50905ea523599490dc92c8ab9989bfb8"}
{"level":"info","ts":"2026-07-06T19:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/427c0d4c00bfe08378e83a96fcf0b92acae0f899baca774a320076c442cd557d"}
{"level":"info","ts":"2026-07-06T19:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47ed502a92e2e6cf8bd63a3f5767836fe3c1d6c442a9a4d28f12bbf5e4e2356a"}
{"level":"info","ts":"2026-07-06T19:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4f36961e3230713ed3ca2c9967d5fe795173416a85a588ff324075e836af5e0a"}
{"level":"info","ts":"2026-07-06T19:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dbb08da2531d517aac9433e23ea7ed875454fed3824df7bbff0430b41e5014d"}