--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2"}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2"}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2"}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2"}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa"}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa"}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"}
{"level":"info","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa"}
{"level":"debug","ts":"2026-07-03T14:45:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"}
{"level":"debug","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89"}
{"level":"info","ts":"2026-07-03T14:45:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5"}
{"level":"debug","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"debug","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"debug","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600"}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d9e9bef326809d75c018eee49f147770555c586895ad5950f05b6c9d91cf05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d9e9bef326809d75c018eee49f147770555c586895ad5950f05b6c9d91cf05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d9e9bef326809d75c018eee49f147770555c586895ad5950f05b6c9d91cf05e"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d9e9bef326809d75c018eee49f147770555c586895ad5950f05b6c9d91cf05e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d9e9bef326809d75c018eee49f147770555c586895ad5950f05b6c9d91cf05e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d9e9bef326809d75c018eee49f147770555c586895ad5950f05b6c9d91cf05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d9e9bef326809d75c018eee49f147770555c586895ad5950f05b6c9d91cf05e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e"}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:45:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:45:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d9e9bef326809d75c018eee49f147770555c586895ad5950f05b6c9d91cf05e"}
{"level":"info","ts":"2026-07-03T14:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13"}
{"level":"info","ts":"2026-07-03T14:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"}
{"level":"info","ts":"2026-07-03T14:45:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e"}
{"level":"info","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92405e22-80a2-40fa-bd12-79404c202881","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51844","PortSpecifier":{"PortValue":51844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92405e22-80a2-40fa-bd12-79404c202881","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92405e22-80a2-40fa-bd12-79404c202881","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51844","PortSpecifier":{"PortValue":51844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089936,"nanos":407027013},"http":{"id":"92405e22-80a2-40fa-bd12-79404c202881","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"92405e22-80a2-40fa-bd12-79404c202881","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92405e22-80a2-40fa-bd12-79404c202881","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92405e22-80a2-40fa-bd12-79404c202881","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92405e22-80a2-40fa-bd12-79404c202881","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92405e22-80a2-40fa-bd12-79404c202881","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92405e22-80a2-40fa-bd12-79404c202881","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92405e22-80a2-40fa-bd12-79404c202881","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92405e22-80a2-40fa-bd12-79404c202881","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92405e22-80a2-40fa-bd12-79404c202881","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92405e22-80a2-40fa-bd12-79404c202881","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92405e22-80a2-40fa-bd12-79404c202881","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34140","PortSpecifier":{"PortValue":34140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34140","PortSpecifier":{"PortValue":34140}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089936,"nanos":457272197},"http":{"id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/auth-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2c56e2bd-cd95-481c-bb9d-4d945222fb2f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51848","PortSpecifier":{"PortValue":51848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","method":"GET","path":"/maas-api/v1/api-keys/e2ab7ee9-a979-4a76-9409-badd69e92e75","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51848","PortSpecifier":{"PortValue":51848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089936,"nanos":535099675},"http":{"id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","method":"GET","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e2ab7ee9-a979-4a76-9409-badd69e92e75",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e2ab7ee9-a979-4a76-9409-badd69e92e75",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ebb3e62-702e-4725-97f8-25cbf42efb28","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34150","PortSpecifier":{"PortValue":34150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","method":"GET","path":"/maas-api/v1/api-keys/1855b0b6-7a54-4008-abf1-dd2945611856","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:34150","PortSpecifier":{"PortValue":34150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089936,"nanos":568997593},"http":{"id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","method":"GET","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1855b0b6-7a54-4008-abf1-dd2945611856",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/1855b0b6-7a54-4008-abf1-dd2945611856",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/auth-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06178c92-15ef-4b2d-9d5e-c4b72aea9d34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37077fea-1710-48c0-980b-49ea06efc468","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43278","PortSpecifier":{"PortValue":43278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37077fea-1710-48c0-980b-49ea06efc468","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37077fea-1710-48c0-980b-49ea06efc468","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43278","PortSpecifier":{"PortValue":43278}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089953,"nanos":621220522},"http":{"id":"37077fea-1710-48c0-980b-49ea06efc468","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37077fea-1710-48c0-980b-49ea06efc468","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37077fea-1710-48c0-980b-49ea06efc468","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37077fea-1710-48c0-980b-49ea06efc468","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37077fea-1710-48c0-980b-49ea06efc468","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37077fea-1710-48c0-980b-49ea06efc468","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37077fea-1710-48c0-980b-49ea06efc468","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37077fea-1710-48c0-980b-49ea06efc468","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37077fea-1710-48c0-980b-49ea06efc468","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37077fea-1710-48c0-980b-49ea06efc468","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37077fea-1710-48c0-980b-49ea06efc468","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37077fea-1710-48c0-980b-49ea06efc468","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5548d0c1-18cb-4caa-9770-c59912469896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5548d0c1-18cb-4caa-9770-c59912469896","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5548d0c1-18cb-4caa-9770-c59912469896","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089953,"nanos":660835635},"http":{"id":"5548d0c1-18cb-4caa-9770-c59912469896","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5548d0c1-18cb-4caa-9770-c59912469896","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5548d0c1-18cb-4caa-9770-c59912469896","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5548d0c1-18cb-4caa-9770-c59912469896","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5548d0c1-18cb-4caa-9770-c59912469896","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5548d0c1-18cb-4caa-9770-c59912469896","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5548d0c1-18cb-4caa-9770-c59912469896","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/auth-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5548d0c1-18cb-4caa-9770-c59912469896","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5548d0c1-18cb-4caa-9770-c59912469896","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5548d0c1-18cb-4caa-9770-c59912469896","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5548d0c1-18cb-4caa-9770-c59912469896","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5548d0c1-18cb-4caa-9770-c59912469896","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43286","PortSpecifier":{"PortValue":43286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c688d195-a9df-4645-856c-5aa2058e5dfd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:43286","PortSpecifier":{"PortValue":43286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089953,"nanos":704322223},"http":{"id":"c688d195-a9df-4645-856c-5aa2058e5dfd","method":"GET","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-zbHDc3fNVIhz91NT_fPyhcC1Wfva77o06wRxWNdffsaqD0yyPsg5J42pkO34"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-zbHDc3fNVIhz91NT_fPyhcC1Wfva77o06wRxWNdffsaqD0yyPsg5J42pkO34\"}"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ac0aaef5-5aee-4838-a522-0bd615412191","keyName":"e2e-auth-iso-a-cafdc5","subscription":"e2e-auth-iso-f9c85b","tenant":"e2e-shared-a-5f1e04","userId":"ac0aaef5-5aee-4838-a522-0bd615412191","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-f9c85b"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:45:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c688d195-a9df-4645-856c-5aa2058e5dfd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60558","PortSpecifier":{"PortValue":60558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:60558","PortSpecifier":{"PortValue":60558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089968,"nanos":632034812},"http":{"id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37c05616-bd4c-47a5-a2d4-b82f0aa789ed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47356","PortSpecifier":{"PortValue":47356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47356","PortSpecifier":{"PortValue":47356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089968,"nanos":668762663},"http":{"id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/auth-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ddbc1a2-4848-40c5-bd5b-1d05f26347d8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47364","PortSpecifier":{"PortValue":47364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089968,"nanos":727701958},"http":{"id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","method":"GET","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MhFsRXhG4wGIJ3fA_LllXBoPNr57QjDwvTe1dgk8ATf67Z6Noi4rCkJNfu3Y"}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MhFsRXhG4wGIJ3fA_LllXBoPNr57QjDwvTe1dgk8ATf67Z6Noi4rCkJNfu3Y\"}"}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-03T14:46:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"54b5332c-bd1b-4016-b6c0-ad62ded152a9","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}}
{"level":"info","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33118","PortSpecifier":{"PortValue":33118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33118","PortSpecifier":{"PortValue":33118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089985,"nanos":768599006},"http":{"id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d2a0f1c-33e0-4804-87d3-01b60b65081e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57738","PortSpecifier":{"PortValue":57738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57738","PortSpecifier":{"PortValue":57738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089985,"nanos":805683622},"http":{"id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/auth-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04cf9532-7bb3-4095-8b33-994e9bebafdf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33128","PortSpecifier":{"PortValue":33128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:33128","PortSpecifier":{"PortValue":33128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089985,"nanos":843441945},"http":{"id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"355da7c2-2ed3-4740-90a0-d0ab7ae49d8f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57740","PortSpecifier":{"PortValue":57740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:57740","PortSpecifier":{"PortValue":57740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783089985,"nanos":881499139},"http":{"id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/auth-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b44e88f9-9a9a-4a75-89ea-7ce4402a80b0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54976","PortSpecifier":{"PortValue":54976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6564a610-4098-4d20-acab-d6afb95a29e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54976","PortSpecifier":{"PortValue":54976}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090002,"nanos":960821121},"http":{"id":"6564a610-4098-4d20-acab-d6afb95a29e1","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6564a610-4098-4d20-acab-d6afb95a29e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51400","PortSpecifier":{"PortValue":51400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51400","PortSpecifier":{"PortValue":51400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090003,"nanos":654539},"http":{"id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/auth-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16b00144-73c2-40eb-a4fe-e76d1559f1a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51408","PortSpecifier":{"PortValue":51408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","method":"GET","path":"/maas-api/v1/api-keys/36c5fdce-588b-44e4-b72a-5db12567afcc","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51408","PortSpecifier":{"PortValue":51408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090003,"nanos":46176595},"http":{"id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","method":"GET","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/36c5fdce-588b-44e4-b72a-5db12567afcc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/36c5fdce-588b-44e4-b72a-5db12567afcc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/auth-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"35527934-5bb9-41ba-84c4-b3ffb7ef301d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54986","PortSpecifier":{"PortValue":54986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","method":"GET","path":"/maas-api/v1/api-keys/36c5fdce-588b-44e4-b72a-5db12567afcc","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:54986","PortSpecifier":{"PortValue":54986}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090003,"nanos":90032800},"http":{"id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","method":"GET","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/36c5fdce-588b-44e4-b72a-5db12567afcc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/36c5fdce-588b-44e4-b72a-5db12567afcc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:46:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1abcc86-1c7c-4c24-a626-e0e88b47e791","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35762","PortSpecifier":{"PortValue":35762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35762","PortSpecifier":{"PortValue":35762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090020,"nanos":144159602},"http":{"id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"caeb7166-f5bd-4cff-8928-d3ad9198825c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42628","PortSpecifier":{"PortValue":42628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42628","PortSpecifier":{"PortValue":42628}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090020,"nanos":178559530},"http":{"id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/auth-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7ea50e3e-0901-4a5a-ae4d-a81316addad1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"631188a0-e00d-4ea6-9557-63db05f22357","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35772","PortSpecifier":{"PortValue":35772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"631188a0-e00d-4ea6-9557-63db05f22357","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"631188a0-e00d-4ea6-9557-63db05f22357","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:35772","PortSpecifier":{"PortValue":35772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090020,"nanos":218304647},"http":{"id":"631188a0-e00d-4ea6-9557-63db05f22357","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1JAs4CjiNAEVUbNFa_xFz1Lp72l1urAm2cbvXSRE34RP4oHNewwwFlLds7W1r"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1JAs4CjiNAEVUbNFa_xFz1Lp72l1urAm2cbvXSRE34RP4oHNewwwFlLds7W1r\"}"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ea8340d8-914f-4310-be5e-c350c4235a4a","keyName":"e2e-auth-iso-a-b69c5c","subscription":"e2e-auth-iso-da401a","tenant":"e2e-shared-a-5f1e04","userId":"ea8340d8-914f-4310-be5e-c350c4235a4a","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"631188a0-e00d-4ea6-9557-63db05f22357","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/auth-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"631188a0-e00d-4ea6-9557-63db05f22357","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-da401a"}
{"level":"info","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"631188a0-e00d-4ea6-9557-63db05f22357","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:47:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"631188a0-e00d-4ea6-9557-63db05f22357","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f562b9653c8ebc7d1fb35a9a32707a775e369e484afe185d55a43d6adf90c04"}
{"level":"info","ts":"2026-07-03T14:47:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f685c8bac8731f948340a1e220624e6b2ed239fab452e734ad0bb83fd942779f"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/142c6bf676ea7c91a8c93da3ee0698507e4ef7d0f8f30549ece00ef930a106ba"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/41c8039adcd42370b194ec62421d3627fa3ecddfe2e67a3dd9d06f2d702f257c"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69ddb528621fb6ba914151814efcfa0e3d61b76e21d811447a00d5e4633f3600"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3798e49cbd15e50826caf5d67d0d1f304aaef47305af691988719381b38da13"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e12e706d5d8b71c54514279d7a3a49e64c7841b8393627877e229fc62375d49"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f98f067f6bb71c3f0122655fb188b404a24ea6ea1ad1b52f8e3566457f90717f"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d789ff73d148654c2d0acabc5c8eb74b2da76f8258d635ad07cfc6d915126a9f"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d9e9bef326809d75c018eee49f147770555c586895ad5950f05b6c9d91cf05e"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd0b49c327d5a042f33f74cc3325d407f8ebca7e9efb82ed302fd48a9191822e"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5d7b001c3ec8e1d8b237a08df55b8c3cf63cc38023b81366914e94b361031f3"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9113bf0d3639b422af6a285cbd814df54abec5303cbd34575b803ef44505ca89"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53807bfed33eccfb3e7dfc3b34eb5e3d8c259e9d6014568e62a97d9d265f91aa"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa04ffa04bd20b347d23a47c9471a5983116d59b8d2a91169fb7e5849052dcb2"}
{"level":"info","ts":"2026-07-03T14:47:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32f19086b5542772d5884d5b6df00e9fa3a5cf096aa1755f1c5e8bea660d0db6"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c"}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c"}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"error","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545"}
{"level":"info","ts":"2026-07-03T14:47:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732"}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732"}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732"}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:47:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"info","ts":"2026-07-03T14:47:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"debug","ts":"2026-07-03T14:48:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15b54feaa3283b591d6954a4c2e498f308b468789829c0d93c654070e3e53c07","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15b54feaa3283b591d6954a4c2e498f308b468789829c0d93c654070e3e53c07"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545"}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece"}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"info","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac"}
{"level":"debug","ts":"2026-07-03T14:48:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:48:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6"}
{"level":"debug","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802"}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5"}
{"level":"info","ts":"2026-07-03T14:48:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d"}
{"level":"info","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42208","PortSpecifier":{"PortValue":42208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42208","PortSpecifier":{"PortValue":42208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090101,"nanos":604958621},"http":{"id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/sub-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"be33dc34-4b9f-488e-b4f3-fc462e8ced9d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47970","PortSpecifier":{"PortValue":47970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47970","PortSpecifier":{"PortValue":47970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090101,"nanos":644123981},"http":{"id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/sub-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e49df10d-d5ea-4dbf-b7ef-ad5a169dc2b7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42214","PortSpecifier":{"PortValue":42214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:42214","PortSpecifier":{"PortValue":42214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090101,"nanos":683483791},"http":{"id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","method":"GET","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yDQJHKtsomakUcEh_SKYlY9yQIHfu7bATsorwb8DncYRufdRlV18Dc702YkA"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yDQJHKtsomakUcEh_SKYlY9yQIHfu7bATsorwb8DncYRufdRlV18Dc702YkA\"}"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"94d63c17-ce75-471b-941f-79d08575cfbf","keyName":"e2e-sub-iso-b7776d","subscription":"e2e-a-only-f02912","tenant":"e2e-shared-a-5f1e04","userId":"94d63c17-ce75-471b-941f-79d08575cfbf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/sub-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-f02912"}
{"level":"info","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9cd6fc79-6911-46bc-8e04-fa22a44f8224","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47980","PortSpecifier":{"PortValue":47980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"97e9d768-b750-48d7-93e7-ed12eab0a316","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47980","PortSpecifier":{"PortValue":47980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090101,"nanos":723204948},"http":{"id":"97e9d768-b750-48d7-93e7-ed12eab0a316","method":"GET","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1IQjLTYFbyN2Qlhkh_sVhIvemOmexdzZI9UGLRrdZbA0AWbbf4UqakZWR2z5T"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1IQjLTYFbyN2Qlhkh_sVhIvemOmexdzZI9UGLRrdZbA0AWbbf4UqakZWR2z5T\"}"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7b7b4216-724b-49d4-8d45-10145b4d7322","keyName":"e2e-sub-iso-434757","subscription":"e2e-b-only-f02912","tenant":"e2e-shared-b-28686a","userId":"7b7b4216-724b-49d4-8d45-10145b4d7322","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/sub-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-f02912"}
{"level":"info","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:48:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"97e9d768-b750-48d7-93e7-ed12eab0a316","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"374e4133-b81a-408c-b992-b6b70657c901","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49106","PortSpecifier":{"PortValue":49106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"374e4133-b81a-408c-b992-b6b70657c901","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"374e4133-b81a-408c-b992-b6b70657c901","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49106","PortSpecifier":{"PortValue":49106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090115,"nanos":822707119},"http":{"id":"374e4133-b81a-408c-b992-b6b70657c901","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"374e4133-b81a-408c-b992-b6b70657c901","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"374e4133-b81a-408c-b992-b6b70657c901","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"374e4133-b81a-408c-b992-b6b70657c901","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"374e4133-b81a-408c-b992-b6b70657c901","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"374e4133-b81a-408c-b992-b6b70657c901","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"374e4133-b81a-408c-b992-b6b70657c901","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/sub-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"374e4133-b81a-408c-b992-b6b70657c901","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"374e4133-b81a-408c-b992-b6b70657c901","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"374e4133-b81a-408c-b992-b6b70657c901","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"374e4133-b81a-408c-b992-b6b70657c901","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"374e4133-b81a-408c-b992-b6b70657c901","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d402a88a-2641-4998-9fba-af28206c500e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51246","PortSpecifier":{"PortValue":51246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d402a88a-2641-4998-9fba-af28206c500e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d402a88a-2641-4998-9fba-af28206c500e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51246","PortSpecifier":{"PortValue":51246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090115,"nanos":864131529},"http":{"id":"d402a88a-2641-4998-9fba-af28206c500e","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d402a88a-2641-4998-9fba-af28206c500e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d402a88a-2641-4998-9fba-af28206c500e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d402a88a-2641-4998-9fba-af28206c500e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d402a88a-2641-4998-9fba-af28206c500e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d402a88a-2641-4998-9fba-af28206c500e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d402a88a-2641-4998-9fba-af28206c500e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/sub-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d402a88a-2641-4998-9fba-af28206c500e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d402a88a-2641-4998-9fba-af28206c500e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d402a88a-2641-4998-9fba-af28206c500e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d402a88a-2641-4998-9fba-af28206c500e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d402a88a-2641-4998-9fba-af28206c500e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49108","PortSpecifier":{"PortValue":49108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96f8bfd8-3fed-4e25-8937-c6568525716a","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:49108","PortSpecifier":{"PortValue":49108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090115,"nanos":895920687},"http":{"id":"96f8bfd8-3fed-4e25-8937-c6568525716a","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-R8Q6a3FcsCOMXos3_qEXHZ5Q1UIIOQIoIgSkeMaTXAj94Az6hgvG68PcjSBj"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-R8Q6a3FcsCOMXos3_qEXHZ5Q1UIIOQIoIgSkeMaTXAj94Az6hgvG68PcjSBj\"}"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7a4de0f0-dbd1-4df5-be84-f6de54f05dae","keyName":"e2e-sub-iso-63936b","subscription":"e2e-shared-sub-fb8e32","tenant":"e2e-shared-a-5f1e04","userId":"7a4de0f0-dbd1-4df5-be84-f6de54f05dae","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/sub-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-fb8e32"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96f8bfd8-3fed-4e25-8937-c6568525716a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51256","PortSpecifier":{"PortValue":51256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3388170d-5b70-4f86-a864-1e30bb761d67","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:51256","PortSpecifier":{"PortValue":51256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090115,"nanos":930102146},"http":{"id":"3388170d-5b70-4f86-a864-1e30bb761d67","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IhUjARXW3fsorEYT_u7BJT15zBbwBYtmWgaeXONZkFI9CfhP5FJrzRzV3skv"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IhUjARXW3fsorEYT_u7BJT15zBbwBYtmWgaeXONZkFI9CfhP5FJrzRzV3skv\"}"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9f790400-dbb7-4ed0-8c57-071a6179763b","keyName":"e2e-sub-iso-f092ce","subscription":"e2e-shared-sub-fb8e32","tenant":"e2e-shared-b-28686a","userId":"9f790400-dbb7-4ed0-8c57-071a6179763b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/sub-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-fb8e32"}
{"level":"info","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:48:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3388170d-5b70-4f86-a864-1e30bb761d67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:48:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6779bdef47fe6c5ff067e892ec7fd0e4ee7428795d18bc79986b866c43e3f5d3"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/988a3f65a6908000e78f90c2a526b5256c4243b542dc96cdf9eb35589ec6c25c"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b6392d36ffea56a4279310a80d7f9026590861b4af314548e012a6c8e489802"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abc073634e4f4d3b23fa28422ca4dfaf556fea62c429bb4340808ed8b209b25d"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3126694527068019353dd4384567fb7e6bf2d00c03381ba30a0761dbc7960a4"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/279dad3c6559ad4aef8b4783314535ac86a62a2dde1369044fed05a495a75cac"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91b5e7948e343f4ca3da45a06a470c9b16f299ef6b20deec664f23ea0125b6a9"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ecd1de9f76ae66ada6687d988c16e59894b51b0e0d7a69ad4df0635a1d3b1e6"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eacd18a66f75123e7f5d683782f335919a7ad8a3b1e79403cd85693ecc3c7545"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b70a15a6836cc973961a19910b27858a61256156b1ee9a4e89c2a19b40237720"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8eff757edacfe9c521884ad08338015298694d16965842d756691b4b91f2f179"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fa67665857c0948886f6a52a12aa80709c39d5beb50c6904f41173eeccbb5c3"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f710f7efc977dbca8c6c155f5e6f141e29ad2c9f80597ccb0f33dcc3b3a55732"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ca753f907f37f342894d50e9db23ac8130e076a64ce64abe469f5b801be5c04"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/398fc213855c4720041b81a4e5c2423b2366837532f8b6b584a1ba0854f3fff1"}
{"level":"info","ts":"2026-07-03T14:48:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc4f5db1e60feb5a7442d6eeb2c1cd7396c1ff62d0a1f1b989c917849c28f9f6"}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d"}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d"}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d"}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046"}
{"level":"error","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046"}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6"}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6"}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6"}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979"}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979"}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979"}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979"}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979"}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"}
{"level":"debug","ts":"2026-07-03T14:49:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"}
{"level":"error","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa"}
{"level":"error","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"error","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:49:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:49:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979"}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece"}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"debug","ts":"2026-07-03T14:50:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15b54feaa3283b591d6954a4c2e498f308b468789829c0d93c654070e3e53c07","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15b54feaa3283b591d6954a4c2e498f308b468789829c0d93c654070e3e53c07"}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"}
{"level":"info","ts":"2026-07-03T14:50:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5"}
{"level":"error","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"}
{"level":"error","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-03T14:50:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa"}
{"level":"error","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6"}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7"}
{"level":"debug","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"}
{"level":"info","ts":"2026-07-03T14:50:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046"}
{"level":"info","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36212","PortSpecifier":{"PortValue":36212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36212","PortSpecifier":{"PortValue":36212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090206,"nanos":987406966},"http":{"id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bccc5ddf-9ee9-4faa-aa02-632ebda54a40","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50152","PortSpecifier":{"PortValue":50152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:50152","PortSpecifier":{"PortValue":50152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090207,"nanos":38662916},"http":{"id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/rate-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b241182f-6a49-4d72-b3f6-fdb0b3159096","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50426591-9b4a-40c9-910d-077034d6401f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36220","PortSpecifier":{"PortValue":36220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50426591-9b4a-40c9-910d-077034d6401f","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50426591-9b4a-40c9-910d-077034d6401f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:36220","PortSpecifier":{"PortValue":36220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090207,"nanos":90709746},"http":{"id":"50426591-9b4a-40c9-910d-077034d6401f","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1L0wQgBAxhIOOQZwc_JAhn2IQT2CfdOt7QwOjjy3PhW7hW7RNo8qArEhyNue4"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1L0wQgBAxhIOOQZwc_JAhn2IQT2CfdOt7QwOjjy3PhW7hW7RNo8qArEhyNue4\"}"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ada42e89-dbaf-4671-a48c-516b2dd15abe","keyName":"e2e-rate-a-b45b7a","subscription":"e2e-rate-iso-a-b45b7a","tenant":"e2e-shared-a-5f1e04","userId":"ada42e89-dbaf-4671-a48c-516b2dd15abe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-b45b7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b45b7a","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50426591-9b4a-40c9-910d-077034d6401f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b45b7a"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50426591-9b4a-40c9-910d-077034d6401f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ada42e89-dbaf-4671-a48c-516b2dd15abe","keyName":"e2e-rate-a-b45b7a","selected_subscription":"e2e-rate-iso-a-b45b7a","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-b45b7a@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b45b7a","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50426591-9b4a-40c9-910d-077034d6401f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50426591-9b4a-40c9-910d-077034d6401f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59492","PortSpecifier":{"PortValue":59492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59492","PortSpecifier":{"PortValue":59492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090208,"nanos":155938162},"http":{"id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1L0wQgBAxhIOOQZwc_JAhn2IQT2CfdOt7QwOjjy3PhW7hW7RNo8qArEhyNue4"}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1L0wQgBAxhIOOQZwc_JAhn2IQT2CfdOt7QwOjjy3PhW7hW7RNo8qArEhyNue4\"}"}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ada42e89-dbaf-4671-a48c-516b2dd15abe","keyName":"e2e-rate-a-b45b7a","subscription":"e2e-rate-iso-a-b45b7a","tenant":"e2e-shared-a-5f1e04","userId":"ada42e89-dbaf-4671-a48c-516b2dd15abe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-b45b7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b45b7a","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b45b7a"}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ada42e89-dbaf-4671-a48c-516b2dd15abe","keyName":"e2e-rate-a-b45b7a","selected_subscription":"e2e-rate-iso-a-b45b7a","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-b45b7a@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b45b7a","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2dc22fa0-3bcd-4061-88fd-d0ce88284276","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acaa4402-664f-4828-8353-0e556c536ecb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59502","PortSpecifier":{"PortValue":59502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"acaa4402-664f-4828-8353-0e556c536ecb","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"acaa4402-664f-4828-8353-0e556c536ecb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:59502","PortSpecifier":{"PortValue":59502}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090209,"nanos":194625933},"http":{"id":"acaa4402-664f-4828-8353-0e556c536ecb","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1L0wQgBAxhIOOQZwc_JAhn2IQT2CfdOt7QwOjjy3PhW7hW7RNo8qArEhyNue4"}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1L0wQgBAxhIOOQZwc_JAhn2IQT2CfdOt7QwOjjy3PhW7hW7RNo8qArEhyNue4\"}"}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ada42e89-dbaf-4671-a48c-516b2dd15abe","keyName":"e2e-rate-a-b45b7a","subscription":"e2e-rate-iso-a-b45b7a","tenant":"e2e-shared-a-5f1e04","userId":"ada42e89-dbaf-4671-a48c-516b2dd15abe","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-b45b7a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b45b7a","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"acaa4402-664f-4828-8353-0e556c536ecb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-b45b7a"}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"acaa4402-664f-4828-8353-0e556c536ecb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"ada42e89-dbaf-4671-a48c-516b2dd15abe","keyName":"e2e-rate-a-b45b7a","selected_subscription":"e2e-rate-iso-a-b45b7a","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-b45b7a@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-b45b7a","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acaa4402-664f-4828-8353-0e556c536ecb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"acaa4402-664f-4828-8353-0e556c536ecb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8967d680-8a77-4cac-9447-e48fb6993df4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47436","PortSpecifier":{"PortValue":47436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090217,"nanos":817336843},"http":{"id":"8967d680-8a77-4cac-9447-e48fb6993df4","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.58:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8967d680-8a77-4cac-9447-e48fb6993df4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55410","PortSpecifier":{"PortValue":55410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55410","PortSpecifier":{"PortValue":55410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090217,"nanos":856188269},"http":{"id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"]}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/8fa024d471b6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=f1b27e2e-e407-4abb-bb8d-735671e4aaf8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"e3557cb2-c45d-4a17-8b58-56268ef857be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.59:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/rate-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1237857-7dd0-491e-9a1b-f15d56fd82de","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47438","PortSpecifier":{"PortValue":47438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"71e3482c-577e-4338-b00e-9b25b10a8315","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47438","PortSpecifier":{"PortValue":47438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090217,"nanos":894702485},"http":{"id":"71e3482c-577e-4338-b00e-9b25b10a8315","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM\"}"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","subscription":"e2e-rate-iso-a-64afed","tenant":"e2e-shared-a-5f1e04","userId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-64afed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-64afed"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","selected_subscription":"e2e-rate-iso-a-64afed","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-64afed@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"71e3482c-577e-4338-b00e-9b25b10a8315","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47452","PortSpecifier":{"PortValue":47452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47452","PortSpecifier":{"PortValue":47452}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090218,"nanos":929359913},"http":{"id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM"}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM\"}"}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","subscription":"e2e-rate-iso-a-64afed","tenant":"e2e-shared-a-5f1e04","userId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-64afed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-64afed"}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","selected_subscription":"e2e-rate-iso-a-64afed","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-64afed@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b0f8c28-cdbd-45a0-8c03-21488377dd18","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47458","PortSpecifier":{"PortValue":47458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47458","PortSpecifier":{"PortValue":47458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090219,"nanos":964761184},"http":{"id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM"}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM\"}"}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","subscription":"e2e-rate-iso-a-64afed","tenant":"e2e-shared-a-5f1e04","userId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-64afed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-64afed"}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","selected_subscription":"e2e-rate-iso-a-64afed","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-64afed@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3b25657-eab7-45f2-b82e-16a6564a9b23","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96da4621-c224-4865-aae7-433e99528598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47472","PortSpecifier":{"PortValue":47472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96da4621-c224-4865-aae7-433e99528598","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96da4621-c224-4865-aae7-433e99528598","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47472","PortSpecifier":{"PortValue":47472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090221,"nanos":2709185},"http":{"id":"96da4621-c224-4865-aae7-433e99528598","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM"}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96da4621-c224-4865-aae7-433e99528598","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM\"}"}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","subscription":"e2e-rate-iso-a-64afed","tenant":"e2e-shared-a-5f1e04","userId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96da4621-c224-4865-aae7-433e99528598","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-64afed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96da4621-c224-4865-aae7-433e99528598","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-64afed"}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96da4621-c224-4865-aae7-433e99528598","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","selected_subscription":"e2e-rate-iso-a-64afed","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-64afed@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96da4621-c224-4865-aae7-433e99528598","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96da4621-c224-4865-aae7-433e99528598","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47476","PortSpecifier":{"PortValue":47476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47476","PortSpecifier":{"PortValue":47476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090222,"nanos":41429183},"http":{"id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM"}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM\"}"}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","subscription":"e2e-rate-iso-a-64afed","tenant":"e2e-shared-a-5f1e04","userId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-64afed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-64afed"}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","selected_subscription":"e2e-rate-iso-a-64afed","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-64afed@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"02618cea-ba98-4abd-ae2b-1cfb93d53f7f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47482","PortSpecifier":{"PortValue":47482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47482","PortSpecifier":{"PortValue":47482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090223,"nanos":76897325},"http":{"id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM"}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM\"}"}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","subscription":"e2e-rate-iso-a-64afed","tenant":"e2e-shared-a-5f1e04","userId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-64afed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-64afed"}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","selected_subscription":"e2e-rate-iso-a-64afed","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-64afed@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"840b8d48-b5f0-4569-bd32-05dd34f6630f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47490","PortSpecifier":{"PortValue":47490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47490","PortSpecifier":{"PortValue":47490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090224,"nanos":113888227},"http":{"id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM"}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM\"}"}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","subscription":"e2e-rate-iso-a-64afed","tenant":"e2e-shared-a-5f1e04","userId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-64afed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-64afed"}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","selected_subscription":"e2e-rate-iso-a-64afed","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-64afed@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3728e1af-f45f-4db9-a3e2-ca4b9e146629","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47498","PortSpecifier":{"PortValue":47498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","method":"POST","path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions","host":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:47498","PortSpecifier":{"PortValue":47498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.58:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090225,"nanos":154257652},"http":{"id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","method":"POST","headers":{":authority":"e2e-shared-a-5f1e04.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XOqEvQkLDU3n2uL3_V822yFc2rI3JHZWugIIFrHMfHgg8J4HIRE4cy0lTQWM\"}"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","subscription":"e2e-rate-iso-a-64afed","tenant":"e2e-shared-a-5f1e04","userId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\",\"requestedSubscription\":\"e2e-rate-iso-a-64afed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5f1e04.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-64afed"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0202491-447f-48d2-98ff-1ec15e3bf3e0","keyName":"e2e-rate-a-64afed","selected_subscription":"e2e-rate-iso-a-64afed","selected_subscription_key":"ai-tenant-e2e-shared-a-5f1e04/e2e-rate-iso-a-64afed@ai-tenant-e2e-shared-a-5f1e04/rate-test-model-5f1e04","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5f1e04","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-64afed","namespace":"ai-tenant-e2e-shared-a-5f1e04","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50fc5c51-90c9-4dd1-b4f0-57706bbf2fa1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55424","PortSpecifier":{"PortValue":55424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98db6d84-7e3e-465a-b43d-e44407b2267c","method":"POST","path":"/ai-tenant-e2e-shared-b-28686a/rate-test-model-28686a/v1/completions","host":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.10:55424","PortSpecifier":{"PortValue":55424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.59:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783090225,"nanos":190222500},"http":{"id":"98db6d84-7e3e-465a-b43d-e44407b2267c","method":"POST","headers":{":authority":"e2e-shared-b-28686a.apps.72c53553-14bb-4f05-a07f-8fa024d471b6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-28686a/rate-test-model-28686a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XB0JohnLTM4ttVsm_gICCZ7wrAklsCN9SprXLT63TFaRzbRPziEoqD3E5w0q"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XB0JohnLTM4ttVsm_gICCZ7wrAklsCN9SprXLT63TFaRzbRPziEoqD3E5w0q\"}"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9625db6a-0671-46ef-8e63-d6b5a3ed4285","keyName":"e2e-rate-b-64afed","subscription":"e2e-rate-iso-b-64afed","tenant":"e2e-shared-b-28686a","userId":"9625db6a-0671-46ef-8e63-d6b5a3ed4285","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-28686a/rate-test-model-28686a\",\"requestedSubscription\":\"e2e-rate-iso-b-64afed\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-28686a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-28686a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-64afed","namespace":"ai-tenant-e2e-shared-b-28686a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-28686a/rate-test-model-28686a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-64afed"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9625db6a-0671-46ef-8e63-d6b5a3ed4285","keyName":"e2e-rate-b-64afed","selected_subscription":"e2e-rate-iso-b-64afed","selected_subscription_key":"ai-tenant-e2e-shared-b-28686a/e2e-rate-iso-b-64afed@ai-tenant-e2e-shared-b-28686a/rate-test-model-28686a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-28686a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-64afed","namespace":"ai-tenant-e2e-shared-b-28686a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-03T14:50:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98db6d84-7e3e-465a-b43d-e44407b2267c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-03T14:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87aad659666129df930ae3da1392ff514a9e859b53d4699cd5c62279e607dfbb"}
{"level":"info","ts":"2026-07-03T14:50:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4597c544e325ad79b33b73db7dbc249f06348e877aff727e229453210130b14d"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/053727ff9bfc97d33969508ff3039b50a215303fd2ecadc2f94858f9009aa0fa"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e178de997074fe2e6be8e9ccbd3240ba5cdd840f8d8635d8b91d3285f0a1afe"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea71400b4948ca776489731482d56adc440d326f468ad9cfd3f92c4910a641e2"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6da687a9423cb1cd83f9369b18c567cc07f2740dc9f3cb687b027f113a78f8f8"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b31e033c2769b31b04fb6af32e382ca1c8ba8d9ffac1104d3bfdb4176a0586a7"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/771af810728e3343d423e7dd0e7f672e8091321060d5c93741f8d2b63a1dc2ca"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18c77cbc043712a430b3ab046fb7a8c70038979271dc93731e061dd7135c0937"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fae6878d457b6289f8d706d2031988169fdd437c70955859c223174df0f3c979"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5e25a53111a6a6306192c36e709e8fe981522c10ba51529dbe74dca96d436c6"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1da4a770c0278faeee21afbf1390ce8d6b36de8cd36d2619b950abf305036cc6"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6db2aadf746eb80c2bbd0e0030d907451b51db9d2506c1028c9ab972e6b0b245"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b3d5ce24ab33eeea1b018d17fa24507338dc96f0fd2385383b8f4cacc9b2046"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4f243ffc7dbb58e04c6983ec796ab49558a11d0755bf22db2df66ec336c07a"}
{"level":"info","ts":"2026-07-03T14:50:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b99b2c497c3817255fbcf023aaeeeddbece345da53b037e0ff53b9ed8331fbd"}
{"level":"info","ts":"2026-07-03T14:51:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0185a7089d7aa5db387ce8e5b1d4e6dafff3ed1df0afc5d209c9ece82d8ff4a2"}
{"level":"info","ts":"2026-07-03T14:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0fd8d72267f80a3490f09e2b7edd5614c945a877e3430a25f075206e96823ede"}
{"level":"info","ts":"2026-07-03T14:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccf844f57fd8314eca4a040bd8ebc2be525ed88f246425d5ca2b8cb8dc10e0b5"}
{"level":"info","ts":"2026-07-03T14:51:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15b54feaa3283b591d6954a4c2e498f308b468789829c0d93c654070e3e53c07"}
{"level":"info","ts":"2026-07-03T14:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c98039502d78adfbda0e8012d4940b0ca3257544f8aa3d72e823c1b590eaece"}
{"level":"info","ts":"2026-07-03T14:51:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6b2297f9471e2f5b885ee1a891990a3479ae3ae777d0c7a5114e9bf8281a7fb"}
{"level":"info","ts":"2026-07-03T14:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/203181f7301d734b850333610db2593513f38583d99cd3af768fb99984e85fbd"}
{"level":"info","ts":"2026-07-03T14:51:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d76cf2f0756dcc9cb91fbae467d60ce4402ac8feadbd9092e310afa799791a00"}