--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"debug","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"error","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f58a9cc2-3190-4505-815f-54504c90c265","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49064","PortSpecifier":{"PortValue":49064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f58a9cc2-3190-4505-815f-54504c90c265","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f58a9cc2-3190-4505-815f-54504c90c265","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49064","PortSpecifier":{"PortValue":49064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808382,"nanos":551277315},"http":{"id":"f58a9cc2-3190-4505-815f-54504c90c265","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f58a9cc2-3190-4505-815f-54504c90c265","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f58a9cc2-3190-4505-815f-54504c90c265","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f58a9cc2-3190-4505-815f-54504c90c265","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f58a9cc2-3190-4505-815f-54504c90c265","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f58a9cc2-3190-4505-815f-54504c90c265","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f58a9cc2-3190-4505-815f-54504c90c265","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/auth-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f58a9cc2-3190-4505-815f-54504c90c265","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f58a9cc2-3190-4505-815f-54504c90c265","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f58a9cc2-3190-4505-815f-54504c90c265","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f58a9cc2-3190-4505-815f-54504c90c265","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f58a9cc2-3190-4505-815f-54504c90c265","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39368","PortSpecifier":{"PortValue":39368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6662cbad-ee97-4b50-8071-c942acfefef1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:39368","PortSpecifier":{"PortValue":39368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808382,"nanos":596039265},"http":{"id":"6662cbad-ee97-4b50-8071-c942acfefef1","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/auth-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6662cbad-ee97-4b50-8071-c942acfefef1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49078","PortSpecifier":{"PortValue":49078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:49078","PortSpecifier":{"PortValue":49078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808382,"nanos":633091794},"http":{"id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","method":"GET","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-x7tWRfjCPolYV9kL_FbjJYWGEYVdqhP5garsGFoqmYYg8ElgjQ53AM3Ci9AP"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-x7tWRfjCPolYV9kL_FbjJYWGEYVdqhP5garsGFoqmYYg8ElgjQ53AM3Ci9AP\"}"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f99ff08e-63f0-4e86-be33-9a18efc0797a","keyName":"e2e-auth-iso-a-bb717c","subscription":"e2e-auth-iso-2b611c","tenant":"e2e-shared-a-7cc2e5","userId":"f99ff08e-63f0-4e86-be33-9a18efc0797a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/auth-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-2b611c"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:06:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f2459613-74e7-4d5a-be0b-ef9df7f611ba","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:06:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:06:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"debug","ts":"2026-07-23T12:06:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46796","PortSpecifier":{"PortValue":46796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7506aff6-02cf-48fe-b8be-172db68c50b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:46796","PortSpecifier":{"PortValue":46796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808401,"nanos":975520980},"http":{"id":"7506aff6-02cf-48fe-b8be-172db68c50b5","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/auth-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:06:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7506aff6-02cf-48fe-b8be-172db68c50b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48696","PortSpecifier":{"PortValue":48696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48696","PortSpecifier":{"PortValue":48696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808402,"nanos":10883203},"http":{"id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/auth-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5023bb1-60b4-4f47-9e9a-f2da5bf0be8e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48712","PortSpecifier":{"PortValue":48712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d972c0c2-71b7-4140-9042-1566a34e5af1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48712","PortSpecifier":{"PortValue":48712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808402,"nanos":54938788},"http":{"id":"d972c0c2-71b7-4140-9042-1566a34e5af1","method":"GET","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BsO1yRAB4rpTPvxm_6LSTnd7hUh82trmzlp9ZrGwLDAiK1zZoSegfOCWsNF3"}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BsO1yRAB4rpTPvxm_6LSTnd7hUh82trmzlp9ZrGwLDAiK1zZoSegfOCWsNF3\"}"}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-23T12:06:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d972c0c2-71b7-4140-9042-1566a34e5af1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-23T12:06:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"error","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"debug","ts":"2026-07-23T12:06:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"error","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:06:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:06:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"info","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34880","PortSpecifier":{"PortValue":34880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34880","PortSpecifier":{"PortValue":34880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808419,"nanos":236942443},"http":{"id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/auth-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c61ed8d-152e-4dbf-9ebe-b0eea80d9dc0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f878178-b0c7-4910-af28-b761038cd852","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33412","PortSpecifier":{"PortValue":33412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f878178-b0c7-4910-af28-b761038cd852","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f878178-b0c7-4910-af28-b761038cd852","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33412","PortSpecifier":{"PortValue":33412}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808419,"nanos":269326321},"http":{"id":"8f878178-b0c7-4910-af28-b761038cd852","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f878178-b0c7-4910-af28-b761038cd852","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f878178-b0c7-4910-af28-b761038cd852","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f878178-b0c7-4910-af28-b761038cd852","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f878178-b0c7-4910-af28-b761038cd852","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f878178-b0c7-4910-af28-b761038cd852","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f878178-b0c7-4910-af28-b761038cd852","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/auth-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f878178-b0c7-4910-af28-b761038cd852","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f878178-b0c7-4910-af28-b761038cd852","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f878178-b0c7-4910-af28-b761038cd852","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f878178-b0c7-4910-af28-b761038cd852","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f878178-b0c7-4910-af28-b761038cd852","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34890","PortSpecifier":{"PortValue":34890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:34890","PortSpecifier":{"PortValue":34890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808419,"nanos":303188082},"http":{"id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/auth-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a1aeeb22-19ad-4add-be59-f3f839afcbfc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33414","PortSpecifier":{"PortValue":33414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e48d5932-ec87-4553-89e0-d3351ca8974f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33414","PortSpecifier":{"PortValue":33414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808419,"nanos":336178740},"http":{"id":"e48d5932-ec87-4553-89e0-d3351ca8974f","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/auth-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:06:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e48d5932-ec87-4553-89e0-d3351ca8974f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:07:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:07:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"error","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33378","PortSpecifier":{"PortValue":33378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6abf9853-19d2-4481-a345-cda3c8d29218","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33378","PortSpecifier":{"PortValue":33378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808436,"nanos":515355076},"http":{"id":"6abf9853-19d2-4481-a345-cda3c8d29218","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/auth-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6abf9853-19d2-4481-a345-cda3c8d29218","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78307788-e680-4887-aff4-01b32602a73f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51468","PortSpecifier":{"PortValue":51468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78307788-e680-4887-aff4-01b32602a73f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78307788-e680-4887-aff4-01b32602a73f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51468","PortSpecifier":{"PortValue":51468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808436,"nanos":552446327},"http":{"id":"78307788-e680-4887-aff4-01b32602a73f","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78307788-e680-4887-aff4-01b32602a73f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78307788-e680-4887-aff4-01b32602a73f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78307788-e680-4887-aff4-01b32602a73f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78307788-e680-4887-aff4-01b32602a73f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78307788-e680-4887-aff4-01b32602a73f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78307788-e680-4887-aff4-01b32602a73f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/auth-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78307788-e680-4887-aff4-01b32602a73f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78307788-e680-4887-aff4-01b32602a73f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78307788-e680-4887-aff4-01b32602a73f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78307788-e680-4887-aff4-01b32602a73f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78307788-e680-4887-aff4-01b32602a73f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51470","PortSpecifier":{"PortValue":51470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","method":"GET","path":"/maas-api/v1/api-keys/048a2a98-2d4c-4d2f-8edd-95781b9ee0e5","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:51470","PortSpecifier":{"PortValue":51470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808436,"nanos":600092095},"http":{"id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","method":"GET","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/048a2a98-2d4c-4d2f-8edd-95781b9ee0e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/048a2a98-2d4c-4d2f-8edd-95781b9ee0e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/auth-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"88f7cf97-a912-411e-8954-4ba8c091ca4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33380","PortSpecifier":{"PortValue":33380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","method":"GET","path":"/maas-api/v1/api-keys/048a2a98-2d4c-4d2f-8edd-95781b9ee0e5","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33380","PortSpecifier":{"PortValue":33380}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808436,"nanos":631919690},"http":{"id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","method":"GET","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/048a2a98-2d4c-4d2f-8edd-95781b9ee0e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/048a2a98-2d4c-4d2f-8edd-95781b9ee0e5",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/auth-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:07:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8d29d6cb-5d41-41d9-9849-3ad64345c08c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:07:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:07:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:07:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"error","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"error","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:07:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:07:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42892","PortSpecifier":{"PortValue":42892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42892","PortSpecifier":{"PortValue":42892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808455,"nanos":950024441},"http":{"id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/auth-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"342087b3-57f0-4b79-a936-0f8ce7cc7c0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59956","PortSpecifier":{"PortValue":59956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13d62e92-097d-4b4a-bb49-d37a8690d236","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:59956","PortSpecifier":{"PortValue":59956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808455,"nanos":987296459},"http":{"id":"13d62e92-097d-4b4a-bb49-d37a8690d236","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/auth-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:07:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13d62e92-097d-4b4a-bb49-d37a8690d236","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42896","PortSpecifier":{"PortValue":42896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b1e5277-8dab-4555-8822-a052581e5b49","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:42896","PortSpecifier":{"PortValue":42896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808456,"nanos":25629554},"http":{"id":"5b1e5277-8dab-4555-8822-a052581e5b49","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12IR1XMfeddj0GtNI_J5vW3vtMS197IGNT1H73B59Pmu3WklL3nZOJRefel19"}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12IR1XMfeddj0GtNI_J5vW3vtMS197IGNT1H73B59Pmu3WklL3nZOJRefel19\"}"}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c902f7ab-02c7-4805-8f52-b7048f3862e7","keyName":"e2e-auth-iso-a-60693b","subscription":"e2e-auth-iso-dcd649","tenant":"e2e-shared-a-7cc2e5","userId":"c902f7ab-02c7-4805-8f52-b7048f3862e7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/auth-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-dcd649"}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:07:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b1e5277-8dab-4555-8822-a052581e5b49","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:07:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af56924ccb27560b361db2151580f20a12ea42d882e1cfcfc20f5f825df11ae4"}
{"level":"info","ts":"2026-07-23T12:07:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/347a9fb692cfcaf41a439ed8c8564bb1e3092a37a32644c9af9c8339bf40cbe2"}
{"level":"info","ts":"2026-07-23T12:07:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31ac9c7503683523859717b5ae25b62fc8bb9b2137d1acb5221ae606a5e35165"}
{"level":"info","ts":"2026-07-23T12:07:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/972fdd46a5afaed83e29e0e6cb0ed0f6e514d209792cdfb5923e1d24ccb46ae4"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af0a263653781578d637d54c7cf6b961bc0c29791cf016f22337985f1c2820ff"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e712dcccbda0ea83b222c5ecd61895ad5e6bf9ece929315861a8e32919c7156d"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07a8b1e6c66a9b3251d7eda527a7680012c445f6beb6ec09113379a779c339ba"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2030d1ddb1dbb3904f7e754f2b652c0c9d02db5dd6264e4ad9114ccd4b1e2526"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/245240bb1f90ff5bf194d74b45d675bae7950f966cfcb38c595650430af98e37"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a32ca49f593c0b255f06b016bd21279c8bff9d0988f7b90be4ca997bb4c524cd"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d10d56e220a2dced39162ee19dc3f3656b052ec6556697346234bd0dc9a922d"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90a33c5b0837945437832ce1aea3cf85c3b60eb0382b8befee28df3791402c7c"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/323dfe4c00efd4347eb63fc6c92b36d9b1d2aa923f2bf83112fd4b7741e2ccf3"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14c3a9faf31026d191acc6baeb486ce685d553a56fc055dfd0780c6a339e4a7c"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3f24911db57a971e9d5bde0cc57647c0ae09fa842350337f753b5221ca953de"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc58a3749a0a1bdbbd1ba86c755435ea4bbdc5b4f9a14855f153c68c5c063d12"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"info","ts":"2026-07-23T12:07:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"error","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"error","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"debug","ts":"2026-07-23T12:08:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"}
{"level":"error","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96d9f7addd3654b8509590fa282039b9a1e3b29e6e1a505556a5775d8ace656"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25280dd76d5719679640b95a54678ca4c7d8b550cc975f2d3131c6ce4a16372"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e96d9f7addd3654b8509590fa282039b9a1e3b29e6e1a505556a5775d8ace656","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e96d9f7addd3654b8509590fa282039b9a1e3b29e6e1a505556a5775d8ace656"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ab7575e3761b767359d1054237d9c14d4647fcd285ef3a1a5e464c6ce8e86e"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e96d9f7addd3654b8509590fa282039b9a1e3b29e6e1a505556a5775d8ace656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a25280dd76d5719679640b95a54678ca4c7d8b550cc975f2d3131c6ce4a16372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a25280dd76d5719679640b95a54678ca4c7d8b550cc975f2d3131c6ce4a16372"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3baa1f8eae45ec62143919dde72186eab506066e3e4c5499a5c152c63f1673"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a25280dd76d5719679640b95a54678ca4c7d8b550cc975f2d3131c6ce4a16372","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c318cd51601cf1ac52433f1293aca2c71f631de6a78f592e133263c0d446b6a2"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cc8b8a73298270cb34d8ebf65bec1c297d5b65970b3b403faa166054b1a97f"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e96d9f7addd3654b8509590fa282039b9a1e3b29e6e1a505556a5775d8ace656"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4c42d8cdfe2fa589776de584ffb05d771cebdba3354bd9ccd03084ee94beeb"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09ab7575e3761b767359d1054237d9c14d4647fcd285ef3a1a5e464c6ce8e86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09ab7575e3761b767359d1054237d9c14d4647fcd285ef3a1a5e464c6ce8e86e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a25280dd76d5719679640b95a54678ca4c7d8b550cc975f2d3131c6ce4a16372"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09ab7575e3761b767359d1054237d9c14d4647fcd285ef3a1a5e464c6ce8e86e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d3baa1f8eae45ec62143919dde72186eab506066e3e4c5499a5c152c63f1673","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d3baa1f8eae45ec62143919dde72186eab506066e3e4c5499a5c152c63f1673"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67e6166befb076cd79e4d206bf32d80593a1583ee878fab8d9ffc6853c2ee49"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19eab03314af5cc99f6315439104737f741e366130c15c356e4fb82723c18c7"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d3baa1f8eae45ec62143919dde72186eab506066e3e4c5499a5c152c63f1673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c318cd51601cf1ac52433f1293aca2c71f631de6a78f592e133263c0d446b6a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c318cd51601cf1ac52433f1293aca2c71f631de6a78f592e133263c0d446b6a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c318cd51601cf1ac52433f1293aca2c71f631de6a78f592e133263c0d446b6a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1cc8b8a73298270cb34d8ebf65bec1c297d5b65970b3b403faa166054b1a97f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1cc8b8a73298270cb34d8ebf65bec1c297d5b65970b3b403faa166054b1a97f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1cc8b8a73298270cb34d8ebf65bec1c297d5b65970b3b403faa166054b1a97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09ab7575e3761b767359d1054237d9c14d4647fcd285ef3a1a5e464c6ce8e86e"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d3baa1f8eae45ec62143919dde72186eab506066e3e4c5499a5c152c63f1673"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e96d9f7addd3654b8509590fa282039b9a1e3b29e6e1a505556a5775d8ace656","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d4c42d8cdfe2fa589776de584ffb05d771cebdba3354bd9ccd03084ee94beeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d4c42d8cdfe2fa589776de584ffb05d771cebdba3354bd9ccd03084ee94beeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c318cd51601cf1ac52433f1293aca2c71f631de6a78f592e133263c0d446b6a2"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1cc8b8a73298270cb34d8ebf65bec1c297d5b65970b3b403faa166054b1a97f"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d4c42d8cdfe2fa589776de584ffb05d771cebdba3354bd9ccd03084ee94beeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d4c42d8cdfe2fa589776de584ffb05d771cebdba3354bd9ccd03084ee94beeb"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a25280dd76d5719679640b95a54678ca4c7d8b550cc975f2d3131c6ce4a16372","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67e6166befb076cd79e4d206bf32d80593a1583ee878fab8d9ffc6853c2ee49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67e6166befb076cd79e4d206bf32d80593a1583ee878fab8d9ffc6853c2ee49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67e6166befb076cd79e4d206bf32d80593a1583ee878fab8d9ffc6853c2ee49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a19eab03314af5cc99f6315439104737f741e366130c15c356e4fb82723c18c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a19eab03314af5cc99f6315439104737f741e366130c15c356e4fb82723c18c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67e6166befb076cd79e4d206bf32d80593a1583ee878fab8d9ffc6853c2ee49"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a19eab03314af5cc99f6315439104737f741e366130c15c356e4fb82723c18c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a19eab03314af5cc99f6315439104737f741e366130c15c356e4fb82723c18c7"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09ab7575e3761b767359d1054237d9c14d4647fcd285ef3a1a5e464c6ce8e86e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d3baa1f8eae45ec62143919dde72186eab506066e3e4c5499a5c152c63f1673","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c318cd51601cf1ac52433f1293aca2c71f631de6a78f592e133263c0d446b6a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1cc8b8a73298270cb34d8ebf65bec1c297d5b65970b3b403faa166054b1a97f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d4c42d8cdfe2fa589776de584ffb05d771cebdba3354bd9ccd03084ee94beeb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67e6166befb076cd79e4d206bf32d80593a1583ee878fab8d9ffc6853c2ee49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a19eab03314af5cc99f6315439104737f741e366130c15c356e4fb82723c18c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:08:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"}
{"level":"error","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:08:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54934","PortSpecifier":{"PortValue":54934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54934","PortSpecifier":{"PortValue":54934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808543,"nanos":418028127},"http":{"id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/sub-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47d4bd03-39c5-4cc2-88af-8c6b67d7cb56","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58666","PortSpecifier":{"PortValue":58666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4a4cf35-092b-464c-8172-5a236f0d6217","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58666","PortSpecifier":{"PortValue":58666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808543,"nanos":458662866},"http":{"id":"e4a4cf35-092b-464c-8172-5a236f0d6217","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/sub-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4a4cf35-092b-464c-8172-5a236f0d6217","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54940","PortSpecifier":{"PortValue":54940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcd18620-17b8-49b8-8f82-6730b05c452a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:54940","PortSpecifier":{"PortValue":54940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808543,"nanos":500038668},"http":{"id":"bcd18620-17b8-49b8-8f82-6730b05c452a","method":"GET","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1dULiWzfaUtE2RfN9_eFrrZsCBTy3X25GmD8x8yXk3dRURHMzUQB7h2A0rV6U"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1dULiWzfaUtE2RfN9_eFrrZsCBTy3X25GmD8x8yXk3dRURHMzUQB7h2A0rV6U\"}"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"43e3a4b3-1862-4f79-a774-df6c45f5dbdd","keyName":"e2e-sub-iso-511a99","subscription":"e2e-a-only-c9b1ac","tenant":"e2e-shared-a-7cc2e5","userId":"43e3a4b3-1862-4f79-a774-df6c45f5dbdd","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/sub-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c9b1ac"}
{"level":"info","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcd18620-17b8-49b8-8f82-6730b05c452a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58682","PortSpecifier":{"PortValue":58682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bb718c43-dc3f-4118-b4bf-3312630faf21","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:58682","PortSpecifier":{"PortValue":58682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808543,"nanos":535952600},"http":{"id":"bb718c43-dc3f-4118-b4bf-3312630faf21","method":"GET","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HHH2sEHfS5JBK0yB_4Kuajp4mEgjTBMqNWRbWiEB3p3q4YhngfUCAqRpuq1f"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HHH2sEHfS5JBK0yB_4Kuajp4mEgjTBMqNWRbWiEB3p3q4YhngfUCAqRpuq1f\"}"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a44b0a5c-57e7-4a89-b635-a8d5e34bb3ce","keyName":"e2e-sub-iso-70d294","subscription":"e2e-b-only-c9b1ac","tenant":"e2e-shared-b-77f87c","userId":"a44b0a5c-57e7-4a89-b635-a8d5e34bb3ce","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/sub-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c9b1ac"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:09:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bb718c43-dc3f-4118-b4bf-3312630faf21","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48726","PortSpecifier":{"PortValue":48726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48726","PortSpecifier":{"PortValue":48726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808557,"nanos":957853450},"http":{"id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/sub-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85392e62-f10d-45ac-8d3f-a2551a7d4405","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47642","PortSpecifier":{"PortValue":47642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdca798a-2371-4955-8946-e82a4f582eb5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47642","PortSpecifier":{"PortValue":47642}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808557,"nanos":992252625},"http":{"id":"fdca798a-2371-4955-8946-e82a4f582eb5","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/sub-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdca798a-2371-4955-8946-e82a4f582eb5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48730","PortSpecifier":{"PortValue":48730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:48730","PortSpecifier":{"PortValue":48730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808558,"nanos":26482449},"http":{"id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-L9GfhrKYNNFEoKtX_AFpaNkQak2tmDSuUaVgyRWgbjvAat7ZAI4Vfs34k10N"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-L9GfhrKYNNFEoKtX_AFpaNkQak2tmDSuUaVgyRWgbjvAat7ZAI4Vfs34k10N\"}"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b9e9ec13-46c0-43f8-aab0-107ed3653a57","keyName":"e2e-sub-iso-8b0385","subscription":"e2e-shared-sub-32417c","tenant":"e2e-shared-a-7cc2e5","userId":"b9e9ec13-46c0-43f8-aab0-107ed3653a57","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/sub-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-32417c"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ee99d06-50d2-4191-9789-7fe16a9afe2e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47656","PortSpecifier":{"PortValue":47656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:47656","PortSpecifier":{"PortValue":47656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808558,"nanos":64003630},"http":{"id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pWdtt5KM4Ui4s4xN_k8R8m08wIGPT4n0nWyY5VMILVqmo9RwqZ53dU0M08k1"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pWdtt5KM4Ui4s4xN_k8R8m08wIGPT4n0nWyY5VMILVqmo9RwqZ53dU0M08k1\"}"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9de6631e-2020-4464-8969-a4e082a3e066","keyName":"e2e-sub-iso-6dc50a","subscription":"e2e-shared-sub-32417c","tenant":"e2e-shared-b-77f87c","userId":"9de6631e-2020-4464-8969-a4e082a3e066","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/sub-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-32417c"}
{"level":"info","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:09:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7b36e9c-61d1-4d28-91a2-e9c91cd46c0f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d4c42d8cdfe2fa589776de584ffb05d771cebdba3354bd9ccd03084ee94beeb"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c318cd51601cf1ac52433f1293aca2c71f631de6a78f592e133263c0d446b6a2"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1cc8b8a73298270cb34d8ebf65bec1c297d5b65970b3b403faa166054b1a97f"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbb4de367c576dd55bfebf07688d424791b927e528ab0f4ff1fc24b500ef553a"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/55abb1c749eb8cfa2b8166bf68c728efc2ac476ee61f7c7a3d0aaedfd2279ceb"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b67e6166befb076cd79e4d206bf32d80593a1583ee878fab8d9ffc6853c2ee49"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a25280dd76d5719679640b95a54678ca4c7d8b550cc975f2d3131c6ce4a16372"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d3baa1f8eae45ec62143919dde72186eab506066e3e4c5499a5c152c63f1673"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d9a81a29a72d4a5244c0ba5323eec2eee0d0b227da9aba24d09f0647bc4050d"}
{"level":"info","ts":"2026-07-23T12:09:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9592aadfee95fe01e1924f4da5703db0d583bd50815fb283987ee11468a7ce28"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a19eab03314af5cc99f6315439104737f741e366130c15c356e4fb82723c18c7"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e96d9f7addd3654b8509590fa282039b9a1e3b29e6e1a505556a5775d8ace656"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e7b5e35957e6f03059bcbf0b48e17a94bb45b75478965ca8c207a65d9a7d116"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34082be917ec10e96fd798c4e5cf7b699d5f96dc58254dc7721bf75244b0150e"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/edf92eb3ddbb9fdb45bcfed5dad06388ddccd33d4ea6d6c202eb80cd4e5d9042"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:09:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09ab7575e3761b767359d1054237d9c14d4647fcd285ef3a1a5e464c6ce8e86e"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"error","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0"}
{"level":"info","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb"}
{"level":"debug","ts":"2026-07-23T12:10:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"error","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"}
{"level":"error","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ba7ccae2a9fcf79466a8818ea2921622a6a48e235d25d68fc1ab61b5456fab"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ba7ccae2a9fcf79466a8818ea2921622a6a48e235d25d68fc1ab61b5456fab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ba7ccae2a9fcf79466a8818ea2921622a6a48e235d25d68fc1ab61b5456fab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ba7ccae2a9fcf79466a8818ea2921622a6a48e235d25d68fc1ab61b5456fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ba7ccae2a9fcf79466a8818ea2921622a6a48e235d25d68fc1ab61b5456fab"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ba7ccae2a9fcf79466a8818ea2921622a6a48e235d25d68fc1ab61b5456fab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcadb8aa503d40ba4e1c66d478593e1d6a424a1f212bfea62a6b105160a0409"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcadb8aa503d40ba4e1c66d478593e1d6a424a1f212bfea62a6b105160a0409","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcadb8aa503d40ba4e1c66d478593e1d6a424a1f212bfea62a6b105160a0409"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcadb8aa503d40ba4e1c66d478593e1d6a424a1f212bfea62a6b105160a0409","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b881693c087074f26f875ad5a251bcfa756e1f04988d08d3cde118b29fe09fe5"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/971135a5fcf29b26ac81569c66f777b249ae7fbac8d473611e1edb607bd0bb30"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b881693c087074f26f875ad5a251bcfa756e1f04988d08d3cde118b29fe09fe5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b881693c087074f26f875ad5a251bcfa756e1f04988d08d3cde118b29fe09fe5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcadb8aa503d40ba4e1c66d478593e1d6a424a1f212bfea62a6b105160a0409"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/854a589da4137d712f467e7aa12f1ec2dbb840af4e49d040f8ab6de8741f6854"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b881693c087074f26f875ad5a251bcfa756e1f04988d08d3cde118b29fe09fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"971135a5fcf29b26ac81569c66f777b249ae7fbac8d473611e1edb607bd0bb30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["971135a5fcf29b26ac81569c66f777b249ae7fbac8d473611e1edb607bd0bb30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8579d27dba9d2501b729b7268a3c39e68ad30f0235b3a2790a4a8b1ea4821b25"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"971135a5fcf29b26ac81569c66f777b249ae7fbac8d473611e1edb607bd0bb30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b45a3b0d7b135044912b7b6f1a854ecc356a3b893c3be84d8871cc5f3126268"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcadb8aa503d40ba4e1c66d478593e1d6a424a1f212bfea62a6b105160a0409","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"854a589da4137d712f467e7aa12f1ec2dbb840af4e49d040f8ab6de8741f6854","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["854a589da4137d712f467e7aa12f1ec2dbb840af4e49d040f8ab6de8741f6854"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b881693c087074f26f875ad5a251bcfa756e1f04988d08d3cde118b29fe09fe5"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/971135a5fcf29b26ac81569c66f777b249ae7fbac8d473611e1edb607bd0bb30"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"854a589da4137d712f467e7aa12f1ec2dbb840af4e49d040f8ab6de8741f6854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/854a589da4137d712f467e7aa12f1ec2dbb840af4e49d040f8ab6de8741f6854"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8579d27dba9d2501b729b7268a3c39e68ad30f0235b3a2790a4a8b1ea4821b25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8579d27dba9d2501b729b7268a3c39e68ad30f0235b3a2790a4a8b1ea4821b25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8579d27dba9d2501b729b7268a3c39e68ad30f0235b3a2790a4a8b1ea4821b25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b45a3b0d7b135044912b7b6f1a854ecc356a3b893c3be84d8871cc5f3126268","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-23T12:10:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b45a3b0d7b135044912b7b6f1a854ecc356a3b893c3be84d8871cc5f3126268"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8579d27dba9d2501b729b7268a3c39e68ad30f0235b3a2790a4a8b1ea4821b25"}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b45a3b0d7b135044912b7b6f1a854ecc356a3b893c3be84d8871cc5f3126268","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b881693c087074f26f875ad5a251bcfa756e1f04988d08d3cde118b29fe09fe5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"971135a5fcf29b26ac81569c66f777b249ae7fbac8d473611e1edb607bd0bb30","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"854a589da4137d712f467e7aa12f1ec2dbb840af4e49d040f8ab6de8741f6854","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8579d27dba9d2501b729b7268a3c39e68ad30f0235b3a2790a4a8b1ea4821b25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b45a3b0d7b135044912b7b6f1a854ecc356a3b893c3be84d8871cc5f3126268","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-23T12:10:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b45a3b0d7b135044912b7b6f1a854ecc356a3b893c3be84d8871cc5f3126268"}
{"level":"info","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43676","PortSpecifier":{"PortValue":43676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43676","PortSpecifier":{"PortValue":43676}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808628,"nanos":709583490},"http":{"id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b9f90bd-c7c8-41e1-a2c5-515738c220b2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50238","PortSpecifier":{"PortValue":50238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:50238","PortSpecifier":{"PortValue":50238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808628,"nanos":771726766},"http":{"id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/rate-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"321a96c3-3231-44ce-8ac7-fd5c14c431b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a70063dc-959c-40db-a135-36b590e25e1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43684","PortSpecifier":{"PortValue":43684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a70063dc-959c-40db-a135-36b590e25e1d","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a70063dc-959c-40db-a135-36b590e25e1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43684","PortSpecifier":{"PortValue":43684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808628,"nanos":835262220},"http":{"id":"a70063dc-959c-40db-a135-36b590e25e1d","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo\"}"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","subscription":"e2e-rate-iso-a-15f56a","tenant":"e2e-shared-a-7cc2e5","userId":"60486649-1552-4206-9405-7b2b6f9840f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-15f56a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a70063dc-959c-40db-a135-36b590e25e1d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15f56a"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a70063dc-959c-40db-a135-36b590e25e1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","selected_subscription":"e2e-rate-iso-a-15f56a","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-15f56a@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a70063dc-959c-40db-a135-36b590e25e1d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a70063dc-959c-40db-a135-36b590e25e1d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43688","PortSpecifier":{"PortValue":43688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ef30f00-9765-4088-9fe9-b55b6899f972","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43688","PortSpecifier":{"PortValue":43688}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808629,"nanos":896562066},"http":{"id":"9ef30f00-9765-4088-9fe9-b55b6899f972","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo"}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo\"}"}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","subscription":"e2e-rate-iso-a-15f56a","tenant":"e2e-shared-a-7cc2e5","userId":"60486649-1552-4206-9405-7b2b6f9840f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-15f56a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15f56a"}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","selected_subscription":"e2e-rate-iso-a-15f56a","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-15f56a@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ef30f00-9765-4088-9fe9-b55b6899f972","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a49825dd-b480-4638-b1c7-02da837887fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43690","PortSpecifier":{"PortValue":43690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a49825dd-b480-4638-b1c7-02da837887fb","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a49825dd-b480-4638-b1c7-02da837887fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43690","PortSpecifier":{"PortValue":43690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808630,"nanos":934089072},"http":{"id":"a49825dd-b480-4638-b1c7-02da837887fb","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo"}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo\"}"}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","subscription":"e2e-rate-iso-a-15f56a","tenant":"e2e-shared-a-7cc2e5","userId":"60486649-1552-4206-9405-7b2b6f9840f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-15f56a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a49825dd-b480-4638-b1c7-02da837887fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15f56a"}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a49825dd-b480-4638-b1c7-02da837887fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","selected_subscription":"e2e-rate-iso-a-15f56a","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-15f56a@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a49825dd-b480-4638-b1c7-02da837887fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a49825dd-b480-4638-b1c7-02da837887fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43700","PortSpecifier":{"PortValue":43700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:43700","PortSpecifier":{"PortValue":43700}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808631,"nanos":967658371},"http":{"id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo"}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo\"}"}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","subscription":"e2e-rate-iso-a-15f56a","tenant":"e2e-shared-a-7cc2e5","userId":"60486649-1552-4206-9405-7b2b6f9840f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-15f56a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15f56a"}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","selected_subscription":"e2e-rate-iso-a-15f56a","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-15f56a@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"86fe72fc-ce1a-4d32-91f5-fdfcad26a5bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55722","PortSpecifier":{"PortValue":55722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"17bcad72-2e59-408f-93eb-a2a3fca879de","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55722","PortSpecifier":{"PortValue":55722}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808633,"nanos":4821312},"http":{"id":"17bcad72-2e59-408f-93eb-a2a3fca879de","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo"}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo\"}"}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","subscription":"e2e-rate-iso-a-15f56a","tenant":"e2e-shared-a-7cc2e5","userId":"60486649-1552-4206-9405-7b2b6f9840f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-15f56a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15f56a"}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","selected_subscription":"e2e-rate-iso-a-15f56a","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-15f56a@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"17bcad72-2e59-408f-93eb-a2a3fca879de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55726","PortSpecifier":{"PortValue":55726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55726","PortSpecifier":{"PortValue":55726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808634,"nanos":41617094},"http":{"id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo"}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo\"}"}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","subscription":"e2e-rate-iso-a-15f56a","tenant":"e2e-shared-a-7cc2e5","userId":"60486649-1552-4206-9405-7b2b6f9840f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-15f56a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15f56a"}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","selected_subscription":"e2e-rate-iso-a-15f56a","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-15f56a@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae3c508b-37bb-4914-ae94-f92b201eac5d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55738","PortSpecifier":{"PortValue":55738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55738","PortSpecifier":{"PortValue":55738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808635,"nanos":75119886},"http":{"id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo"}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo\"}"}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","subscription":"e2e-rate-iso-a-15f56a","tenant":"e2e-shared-a-7cc2e5","userId":"60486649-1552-4206-9405-7b2b6f9840f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-15f56a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15f56a"}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","selected_subscription":"e2e-rate-iso-a-15f56a","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-15f56a@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea47dd96-c291-4a92-a85a-baf846a1f8ca","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d340ca-144b-4241-9efb-9364737c5479","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55750","PortSpecifier":{"PortValue":55750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5d340ca-144b-4241-9efb-9364737c5479","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d340ca-144b-4241-9efb-9364737c5479","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:55750","PortSpecifier":{"PortValue":55750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808636,"nanos":116261480},"http":{"id":"a5d340ca-144b-4241-9efb-9364737c5479","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo"}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XA7tvaKXUYmZXuF0_Y3wLIqffylHD54YE9YpTnojIdgWDZsDBtxUhVvKTsLo\"}"}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","subscription":"e2e-rate-iso-a-15f56a","tenant":"e2e-shared-a-7cc2e5","userId":"60486649-1552-4206-9405-7b2b6f9840f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-15f56a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5d340ca-144b-4241-9efb-9364737c5479","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-15f56a"}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d340ca-144b-4241-9efb-9364737c5479","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60486649-1552-4206-9405-7b2b6f9840f3","keyName":"e2e-rate-a-15f56a","selected_subscription":"e2e-rate-iso-a-15f56a","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-15f56a@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-15f56a","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d340ca-144b-4241-9efb-9364737c5479","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d340ca-144b-4241-9efb-9364737c5479","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33118","PortSpecifier":{"PortValue":33118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33118","PortSpecifier":{"PortValue":33118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808644,"nanos":870029008},"http":{"id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.79:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46e1e8f9-8f31-43ce-9c23-83cb67dce6c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41924","PortSpecifier":{"PortValue":41924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bb479bb-3311-4966-8a18-2946e9df56a5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41924","PortSpecifier":{"PortValue":41924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808644,"nanos":909647095},"http":{"id":"9bb479bb-3311-4966-8a18-2946e9df56a5","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"]}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/608660f19de8"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=6628e0a3-15e5-4e8e-a44b-049958b54524"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"5ef4894a-e528-4c9e-8d31-05017ccb6d4d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/rate-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bb479bb-3311-4966-8a18-2946e9df56a5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33120","PortSpecifier":{"PortValue":33120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33120","PortSpecifier":{"PortValue":33120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808644,"nanos":941924360},"http":{"id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-taKEpCilUczWrGrR_pn5O6zcakEZgRHK5e8O4xzbqwI26TFURfY8OU4j8RxC"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-taKEpCilUczWrGrR_pn5O6zcakEZgRHK5e8O4xzbqwI26TFURfY8OU4j8RxC\"}"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5f27ce2-0380-4cb9-ae16-124f17f8475d","keyName":"e2e-rate-a-9466a9","subscription":"e2e-rate-iso-a-9466a9","tenant":"e2e-shared-a-7cc2e5","userId":"f5f27ce2-0380-4cb9-ae16-124f17f8475d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-9466a9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9466a9","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9466a9"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f5f27ce2-0380-4cb9-ae16-124f17f8475d","keyName":"e2e-rate-a-9466a9","selected_subscription":"e2e-rate-iso-a-9466a9","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-9466a9@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9466a9","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbf93d2e-2fb6-4998-a4ab-b8a06e937855","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a773918-dccf-4893-b580-5ba9e4286074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33128","PortSpecifier":{"PortValue":33128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a773918-dccf-4893-b580-5ba9e4286074","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a773918-dccf-4893-b580-5ba9e4286074","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33128","PortSpecifier":{"PortValue":33128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808645,"nanos":974322863},"http":{"id":"8a773918-dccf-4893-b580-5ba9e4286074","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-taKEpCilUczWrGrR_pn5O6zcakEZgRHK5e8O4xzbqwI26TFURfY8OU4j8RxC"}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-taKEpCilUczWrGrR_pn5O6zcakEZgRHK5e8O4xzbqwI26TFURfY8OU4j8RxC\"}"}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5f27ce2-0380-4cb9-ae16-124f17f8475d","keyName":"e2e-rate-a-9466a9","subscription":"e2e-rate-iso-a-9466a9","tenant":"e2e-shared-a-7cc2e5","userId":"f5f27ce2-0380-4cb9-ae16-124f17f8475d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-9466a9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9466a9","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a773918-dccf-4893-b580-5ba9e4286074","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9466a9"}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a773918-dccf-4893-b580-5ba9e4286074","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f5f27ce2-0380-4cb9-ae16-124f17f8475d","keyName":"e2e-rate-a-9466a9","selected_subscription":"e2e-rate-iso-a-9466a9","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-9466a9@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9466a9","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a773918-dccf-4893-b580-5ba9e4286074","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a773918-dccf-4893-b580-5ba9e4286074","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33142","PortSpecifier":{"PortValue":33142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","method":"POST","path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions","host":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:33142","PortSpecifier":{"PortValue":33142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.79:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808647,"nanos":8617319},"http":{"id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","method":"POST","headers":{":authority":"e2e-shared-a-7cc2e5.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-taKEpCilUczWrGrR_pn5O6zcakEZgRHK5e8O4xzbqwI26TFURfY8OU4j8RxC"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-taKEpCilUczWrGrR_pn5O6zcakEZgRHK5e8O4xzbqwI26TFURfY8OU4j8RxC\"}"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5f27ce2-0380-4cb9-ae16-124f17f8475d","keyName":"e2e-rate-a-9466a9","subscription":"e2e-rate-iso-a-9466a9","tenant":"e2e-shared-a-7cc2e5","userId":"f5f27ce2-0380-4cb9-ae16-124f17f8475d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\",\"requestedSubscription\":\"e2e-rate-iso-a-9466a9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7cc2e5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9466a9","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7cc2e5/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9466a9"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f5f27ce2-0380-4cb9-ae16-124f17f8475d","keyName":"e2e-rate-a-9466a9","selected_subscription":"e2e-rate-iso-a-9466a9","selected_subscription_key":"ai-tenant-e2e-shared-a-7cc2e5/e2e-rate-iso-a-9466a9@ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7cc2e5","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9466a9","namespace":"ai-tenant-e2e-shared-a-7cc2e5","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-7cc2e5/rate-test-model-7cc2e5"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc6b7524-a66a-42b5-96ab-5d0a1086287f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41936","PortSpecifier":{"PortValue":41936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df93fdb0-d79f-4fba-b2da-104082d15993","method":"POST","path":"/ai-tenant-e2e-shared-b-77f87c/rate-test-model-77f87c/v1/completions","host":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.16:41936","PortSpecifier":{"PortValue":41936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784808647,"nanos":54421698},"http":{"id":"df93fdb0-d79f-4fba-b2da-104082d15993","method":"POST","headers":{":authority":"e2e-shared-b-77f87c.apps.df24a0d5-18ed-42c5-8ad0-608660f19de8.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-77f87c/rate-test-model-77f87c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-f95Ylr0ivrFo6Zrw_hxZZ7ftmsrg5Dmdt5FrRHBc08bhAzmq7bVUFS4WSOd5"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-f95Ylr0ivrFo6Zrw_hxZZ7ftmsrg5Dmdt5FrRHBc08bhAzmq7bVUFS4WSOd5\"}"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"865fb8a1-e560-4bd1-8781-15457b0e5cc3","keyName":"e2e-rate-b-9466a9","subscription":"e2e-rate-iso-b-9466a9","tenant":"e2e-shared-b-77f87c","userId":"865fb8a1-e560-4bd1-8781-15457b0e5cc3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-77f87c/rate-test-model-77f87c\",\"requestedSubscription\":\"e2e-rate-iso-b-9466a9\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-77f87c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-77f87c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9466a9","namespace":"ai-tenant-e2e-shared-b-77f87c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-77f87c/rate-test-model-77f87c"}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-77f87c/rate-test-model-77f87c\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-77f87c/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-9466a9"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"865fb8a1-e560-4bd1-8781-15457b0e5cc3","keyName":"e2e-rate-b-9466a9","selected_subscription":"e2e-rate-iso-b-9466a9","selected_subscription_key":"ai-tenant-e2e-shared-b-77f87c/e2e-rate-iso-b-9466a9@ai-tenant-e2e-shared-b-77f87c/rate-test-model-77f87c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-77f87c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-9466a9","namespace":"ai-tenant-e2e-shared-b-77f87c","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-77f87c/rate-test-model-77f87c"},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-23T12:10:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df93fdb0-d79f-4fba-b2da-104082d15993","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-23T12:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b45a3b0d7b135044912b7b6f1a854ecc356a3b893c3be84d8871cc5f3126268"}
{"level":"info","ts":"2026-07-23T12:10:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dbae7e17e6ca91fa930c462181959d5c386e4efd387f348d4c2b92298d449d2e"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ffe42d10c53a9ad99e367b0783901287cd745a2cfa2235cbc21d6d71ce348c0"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8afc556fbda3c92f1513f8bbca03c47e8e3305fe20b62d6c7b046a1f8fd665f6"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bcadb8aa503d40ba4e1c66d478593e1d6a424a1f212bfea62a6b105160a0409"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/285f41b9a5f4fe7e6635498e3fd563b4d6f4c0f21d38f805755be53d38f12b75"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18a59432af0e78c9b1bfb912f0ea78438ac44c50732852e647d68ddedd009d6d"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/854a589da4137d712f467e7aa12f1ec2dbb840af4e49d040f8ab6de8741f6854"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52ba7ccae2a9fcf79466a8818ea2921622a6a48e235d25d68fc1ab61b5456fab"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b43513434d2697dc726c90e28098eea55536ec772f2b236d2aa36149df0f068"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a3506ff2caaf06e30de7d65e03b2c6219c22dda5c5f406194b78d14e999bd25"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5e91dfd57cda145450a896cb13ba9ec5bc9b02905309d3f040c6861afd2c5c0"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76bfb1bfcd6e59a13edb559fcdac15f670326082ec68746f16d920db5c446626"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8579d27dba9d2501b729b7268a3c39e68ad30f0235b3a2790a4a8b1ea4821b25"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/26100e9ad5b2570f823a795bf302afa5025042363e08510444f9eb505a6113d3"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/141f78c990d0a9647ed2ba27d1aa9957d1944666cb0919d24eae763f41343dfb"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b881693c087074f26f875ad5a251bcfa756e1f04988d08d3cde118b29fe09fe5"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/167fd8ab596e88eca4d79bde2dab2fea1371cbce14d16e3625b8fe15ff8c51d0"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b96f5e48c2e9e74de26ddd5fc2213d036716d9c79caefcb587ec76ceee4b7d46"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/310669938e8914e6285c9258ffb04edc82d93bd0a25facea679f834967b7fb6c"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b9877281f28c945222a79c1aedbc369832226edb79c4e1130297b58a2622863"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91ff65466604b48b00e17894964b591a2864ec656863d631725c2ba55b7edbf7"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/971135a5fcf29b26ac81569c66f777b249ae7fbac8d473611e1edb607bd0bb30"}
{"level":"info","ts":"2026-07-23T12:10:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffc3ea9478530db1ebce7b1de910bca85bf3a9ab93a5b0243845c343912db4a9"}